Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update pre-commit hook zricethezav/gitleaks to v8.22.0 #12

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update pre-commit hook zricethezav/gitleaks to v8.22.0 #12

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 20, 2022 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
zricethezav/gitleaks repository minor v8.15.0 -> v8.22.0

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

zricethezav/gitleaks (zricethezav/gitleaks)

v8.22.0

Compare Source

v8.21.4

Compare Source

Changelog

v8.21.3

Compare Source

Changelog

v8.21.2

Compare Source

Changelog

v8.21.1

Compare Source

Changelog

v8.21.0

Compare Source

Changelog

respect @​rgmz @​9999years

⚠️ Note: you may find some findings that were previously ignored if using .gitleaksignore pop up in your scans. This is due to a fix for a long standing bug where gitleaks would incorrectly report merge commit SHAs instead of the actual commit where a secret was introduced. See the following issues for more context:

v8.20.1

Compare Source

Changelog

v8.20.0

Compare Source

Changelog

Huge huge thanks to @​bplaxco for supporting b64 decoding, @​recreator66 for bug fixes, and to @​rgmz for his continued support of the project in the form of PRs and reviews. Thanks you!

New Feature: Decoding

Sometimes secrets are encoded in a way that can make them difficult to find
with just regex. Now you can tell gitleaks to automatically find and decode
encoded text. The flag --max-decode-depth enables this feature (the default
value "0" means the feature is disabled by default).

Recursive decoding is supported since decoded text can also contain encoded
text. The flag --max-decode-depth sets the recursion limit. Recursion stops
when there are no new segments of encoded text to decode, so setting a really
high max depth doesn't mean it will make that many passes. It will only make as
many as it needs to decode the text. Overall, decoding only minimally increases
scan times.

The findings for encoded text differ from normal findings in the following
ways:

  • The location points the bounds of the encoded text
    • If the rule matches outside the encoded text, the bounds are adjusted to
      include that as well
  • The match and secret contain the decoded value
  • Two tags are added decoded:<encoding> and decode-depth:<depth>

Currently supported encodings:

  • base64 (both standard and base64url)

v8.19.3

Compare Source

Changelog

v8.19.2

Compare Source

Changelog

v8.19.1

Compare Source

Changelog

v8.19.0

Compare Source

Changelog

v8.18.4

Compare Source

Changelog

Shout out to @​coderabbit for their sponsorship!

v8.18.3

Compare Source

Changelog

v8.18.2

Compare Source

Changelog

v8.18.1

Compare Source

Changelog

v8.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: gitleaks/gitleaks@v8.17.0...v8.18.0

v8.17.0

Compare Source

What's Changed

New Contributors

Full Changelog: gitleaks/gitleaks@v8.16.4...v8.17.0

v8.16.4

Compare Source

Changelog

v8.16.3

Compare Source

Changelog

Huuuuuge thank you to all the contributors especially @​rgmz

@​edwardwang888 @​wparad @​sadikkuzu @​RafaelFigueiredo @​fgreinacher @​jasikpark @​sergiomarotco

v8.16.2

Compare Source

Changelog

Thanks to @​americanair for sponsoring this open source project!

Thanks to all the contributors this release: @​fgreinacher @​wparad @​RafaelFigueiredo @​sergiomarotco @​jasikpark

v8.16.1

Compare Source

Changelog

v8.16.0

Compare Source

Changelog

Allowlist Regex Targets

Let's use the generic rule to demonstrate the new regexTarget allowlist option

[[rules]]
description = "Generic API Key"
id = "generic-api-key"
regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
secretGroup = 1
entropy = 3.5
keywords = [
    "key","api","token","secret","client","passwd","password","auth","access",
]

example.txt will be our target and contain a single line with a fake secret:

var discord_client_secret = '8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ'

Running gitleaks on this file using the generic rule will return one finding:

gitleaks detect --source=example.txt --no-git -v --config=example.toml

    ○
    │╲
    │ ○
    ○ ░
    ░    gitleaks

Finding:     discord_client_secret = '8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ'
Secret:      8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ
RuleID:      generic-api-key
Entropy:     4.413910
File:        example.txt
Line:        1
Fingerprint: example.txt:generic-api-key:1

We can add a allowlist regexes entry to include part of the secret. This will cause gitleaks to ignore the finding above.
Note that by default gitleaks uses the Secret to compare against allowlist regexes.

Adding the following allowlist to the generic rule will cause gitleaks to ignore the finding:

[rules.allowlist]
regexes = ["vV"]

But now say you don't want to use Secret to compare against your allowlist regexes. Well, now you can use regexTarget and set the value as either line or match to compare against the line or regex match:

[rules.allowlist]
regexTarget = "match"
regexes = ["discord"]

and

[rules.allowlist]
regexTarget = "line"
regexes = ["var"]

will both result in the finding being ignored because discord is found in the generic rule regex match and var is in the line where the finding was found.

In addition to rule allowlists, you can set regexTarget in the global allowlist:

[allowlist]
regexTarget = "line"
regexes = ["var"]

Thanks @​bplaxco for the review

v8.15.4

Compare Source

Changelog

Shouts outs to @​sandyydk @​raffis @​lawndoc @​sadikkuzu

v8.15.3

Compare Source

Changelog

v8.15.2

Compare Source

Changelog

[v8.15.1](https://redirect.

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.15.1 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.15.2 Dec 2, 2022
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from f66cb3d to 1b4674f Compare December 2, 2022 04:51
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.15.2 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.0 Mar 11, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 1b4674f to 8ace0fc Compare March 11, 2023 22:44
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.0 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.1 Mar 18, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 8ace0fc to 68ddada Compare March 18, 2023 19:57
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.1 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.2 Mar 30, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 68ddada to dbb8533 Compare March 30, 2023 23:52
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.2 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.3 May 28, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from dbb8533 to b3c478f Compare May 28, 2023 11:07
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.3 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.4 Jun 6, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from b3c478f to 1667158 Compare June 6, 2023 18:31
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.4 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.17.0 Jun 15, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 1667158 to 0ae0fac Compare June 15, 2023 12:56
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.17.0 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.0 Aug 22, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 0ae0fac to e33de3a Compare August 22, 2023 23:36
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.0 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.1 Nov 17, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from e33de3a to d7bf79b Compare November 17, 2023 23:03
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.1 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.2 Feb 1, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from d7bf79b to f8e8199 Compare February 1, 2024 18:55
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from f8e8199 to 3266033 Compare June 1, 2024 15:50
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.2 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.3 Jun 1, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 3266033 to 1eb452c Compare June 14, 2024 17:39
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.3 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.4 Jun 14, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 1eb452c to 167d8cc Compare September 14, 2024 02:14
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.4 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.19.0 Sep 14, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 167d8cc to 5ab652d Compare September 14, 2024 10:58
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.19.0 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.19.1 Sep 14, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 5ab652d to cb551f9 Compare September 16, 2024 16:41
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.19.1 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.19.2 Sep 16, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from cb551f9 to 60ccff0 Compare September 26, 2024 16:22
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.19.2 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.19.3 Sep 26, 2024
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.19.3 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.20.0 Oct 3, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch 2 times, most recently from c02b94a to 2d71f18 Compare October 7, 2024 19:02
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.20.0 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.20.1 Oct 7, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 2d71f18 to 077b63c Compare October 15, 2024 04:51
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.20.1 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.21.0 Oct 15, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 077b63c to 88e7839 Compare October 18, 2024 12:14
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.21.0 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.21.1 Oct 18, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 88e7839 to ef52cef Compare October 28, 2024 17:18
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.21.1 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.21.2 Oct 28, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from ef52cef to 538a0d6 Compare December 19, 2024 21:51
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.21.2 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.21.3 Dec 19, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 538a0d6 to 498e3ee Compare December 20, 2024 20:13
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.21.3 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.22.0 Dec 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants