Merge pull request #83 from fedora-infra/leak

Add `.gitleaks.toml` to ignore some GitLab runner tokens
fedora-infra · Nov 28, 2023 · 5317268 · 5317268
2 parents ed2af76 + bab4e4b
commit 5317268
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.gitleaks.toml b/.gitleaks.toml
@@ -0,0 +1,8 @@
+[allowlist]
+regexTarget = "match"
+# If GitLab sends back their runner token as a part of the HTTP API response
+# then it is safe to assume that it is pretty harmless to have that exposed.
+# Either that or they must be reached out regarding this to confirm the same.
+regexes = [
+    "REMOVED",
+]