gitleaks/gitleaks issues and pull requests

#1506 - fix flag access

Pull Request - State: closed - Opened by zricethezav about 2 months ago

#1505 - gitleaks doesn't work anymore

Issue - State: closed - Opened by lucacome about 2 months ago - 3 comments
Labels: bug

#1504 - Deprecate `detect` and `protect`. Add `git`, `dir`, `stdin`

Pull Request - State: closed - Opened by zricethezav about 2 months ago - 3 comments

#1503 - Update Harness rules to add _ and - in the account ID part.

Pull Request - State: closed - Opened by dewan-ahmed about 2 months ago - 1 comment

#1502 - Add support in .gitleaksignore file comment strings (#1425)

Pull Request - State: closed - Opened by h4r7w3l1 about 2 months ago - 1 comment

#1501 - Bugfix/1352 incorrect report multiple lines

Pull Request - State: closed - Opened by recreator66 about 2 months ago - 7 comments

#1500 - Catch common pattern errors with `\b`

Pull Request - State: open - Opened by rgmz about 2 months ago - 2 comments

#1499 - Experiment: run validation as tests

Pull Request - State: open - Opened by rgmz about 2 months ago - 2 comments

#1498 - Ignore common false positives for old Vault token format

Pull Request - State: closed - Opened by rgmz about 2 months ago - 1 comment

#1497 - Add new SaladCloud API keys rule

Pull Request - State: open - Opened by seniorquico about 2 months ago

#1496 - Define multiple allowlists per rule

Pull Request - State: closed - Opened by rgmz about 2 months ago - 6 comments

#1495 - Add Onfido API Token detector to recognize this type of secrets.

Pull Request - State: open - Opened by lucasan1 about 2 months ago

#1494 - Update generic-api-key rule

Pull Request - State: closed - Opened by recreator66 2 months ago

#1492 - Experiment: add capture group for identifier

Pull Request - State: closed - Opened by rgmz 2 months ago - 1 comment

#1491 - Restrict Etsy keywords

Pull Request - State: closed - Opened by rgmz 2 months ago - 1 comment

#1490 - Old Vault token false positives

Issue - State: closed - Opened by rgmz 2 months ago - 6 comments

#1489 - Add entropy to GitHub rules

Pull Request - State: closed - Opened by rgmz 2 months ago - 1 comment

#1488 - Decode Base64

Pull Request - State: closed - Opened by bplaxco 2 months ago - 15 comments

#1487 - Fix GitLeaks workflow error

Pull Request - State: closed - Opened by rgmz 2 months ago

#1486 - gitleaks action scan repo not found secret in org

Issue - State: open - Opened by orange723 2 months ago
Labels: bug

#1485 - Add install.sh bash script installation option

Pull Request - State: open - Opened by suhovius 2 months ago

#1484 - Generate comprehensive secret samples

Pull Request - State: open - Opened by rgmz 2 months ago - 7 comments

#1483 - Update Hashicorp Vault token pattern

Pull Request - State: closed - Opened by rgmz 2 months ago - 3 comments

#1482 - Remove redundant pipe between `[...]` in pattern

Pull Request - State: closed - Opened by rgmz 2 months ago - 1 comment

#1481 - Update gcp-api-key rule

Pull Request - State: closed - Opened by rgmz 2 months ago

#1480 - Make config generation utils public

Pull Request - State: closed - Opened by rgmz 2 months ago - 2 comments

#1479 - Log warning message when file takes a long time

Pull Request - State: open - Opened by rgmz 2 months ago

#1478 - Update logic

Pull Request - State: closed - Opened by rgmz 2 months ago - 3 comments

#1477 - Fix private key matching greedily

Pull Request - State: closed - Opened by rgmz 2 months ago - 1 comment

#1475 - Gitleaks Regex Overreach: Private Key Detection Captures Excessive Unrelated Content

Issue - State: open - Opened by MarkPorohnja 2 months ago - 1 comment
Labels: bug

#1474 - Added poetry.lock to default allowlist paths

Pull Request - State: closed - Opened by malmor 2 months ago

#1473 - Refactor Sarif report output

Pull Request - State: closed - Opened by rgmz 2 months ago - 1 comment

#1472 - Handle when Read returns both n > 0 bytes and EOF

Pull Request - State: closed - Opened by rgmz 3 months ago - 1 comment

#1471 - Update reference rule to include false-positive tests

Pull Request - State: open - Opened by rgmz 3 months ago

#1470 - Remove more useless capture groups

Pull Request - State: open - Opened by rgmz 3 months ago

#1469 - Make Square prefix case sensitive

Pull Request - State: closed - Opened by rgmz 3 months ago

#1468 - square-access-token Rule matches for Docker Image Digest (False Positives)

Issue - State: closed - Opened by very-doge-wow 3 months ago - 1 comment
Labels: bug

#1467 - OpenAI API Key rule is missing keys

Issue - State: open - Opened by bplaxco 3 months ago - 2 comments
Labels: bug

#1466 - Update config rule validation logic

Pull Request - State: closed - Opened by rgmz 3 months ago - 3 comments

#1465 - ubi8/python 3.12 emits RuntimeWarning for tarfile

Issue - State: open - Opened by tbugfinder 3 months ago
Labels: bug

#1464 - Gitleaks returns exit code 0 when a sequence of invalid flags is passed

Issue - State: open - Opened by fdz-tiago-taveira 3 months ago - 4 comments
Labels: bug

#1463 - Use rule id for config validation error

Pull Request - State: closed - Opened by rgmz 3 months ago - 6 comments

#1462 - Refactor `kubernetes-secret` rule

Pull Request - State: closed - Opened by rgmz 3 months ago - 9 comments

#1461 - Return non-0 exit code from `DetectGit`

Pull Request - State: closed - Opened by rgmz 3 months ago - 1 comment

#1460 - Remove unnecessary capture groups

Pull Request - State: closed - Opened by rgmz 3 months ago - 2 comments

#1459 - Use first non-empty group if `secretGroup` isn't set

Pull Request - State: closed - Opened by rgmz 3 months ago - 1 comment

#1458 - (chore): Updating Golang and Alpine Base-Images in Dockerfile

Pull Request - State: open - Opened by localleon 3 months ago

#1457 - Make `secretGroup` more resilient

Issue - State: closed - Opened by rgmz 3 months ago
Labels: enhancement

#1456 - Declare API keys with checksums

Issue - State: open - Opened by fgreinacher 3 months ago
Labels: enhancement

#1455 - Scan for broken git repo

Issue - State: closed - Opened by hvprvtr 3 months ago - 2 comments
Labels: enhancement

#1454 - (feat): Adding secret detection rule for Kubernetes secrets

Pull Request - State: closed - Opened by localleon 3 months ago - 8 comments

#1453 - add gitleaks-detect hook

Pull Request - State: closed - Opened by redxiiikkTW 3 months ago - 1 comment

#1452 - Should you use --mirror argument when scanning a repository for secrets

Issue - State: closed - Opened by g3kk0 3 months ago - 1 comment

#1450 - Invalid --log-opts disregards git log exit code and silently does nothing at all

Issue - State: closed - Opened by mriehl 3 months ago - 1 comment
Labels: bug

#1449 - Add rule for OpenShift 4 user tokens

Pull Request - State: closed - Opened by rgmz 3 months ago

#1448 - I'm integrating gitleaks as a precommit commit hooks but it is not working

Issue - State: open - Opened by anamika-byldd 4 months ago
Labels: bug

#1447 - GitLeaks does not detect Discord Bot Tokens in source code

Issue - State: open - Opened by vimfn 4 months ago - 1 comment
Labels: bug

#1446 - Add gradle verification-metadata.xml to global allowlist

Pull Request - State: closed - Opened by niklas-w7 4 months ago

#1445 - Add gradles verification-metadata.xml to the global allowlist

Issue - State: closed - Opened by niklas-w7 4 months ago - 2 comments
Labels: enhancement

#1444 - Support Hubspot Private App Access Tokens and Developer API keys

Issue - State: open - Opened by lem-onade 4 months ago
Labels: enhancement

#1443 - Update HubSpot rules

Pull Request - State: closed - Opened by lem-onade 4 months ago - 1 comment

#1442 - openai: detect project API keys

Pull Request - State: open - Opened by becojo 4 months ago

#1441 - Baseline is ignored when using the --redact argument

Issue - State: open - Opened by gps035 4 months ago - 1 comment
Labels: bug

#1440 - Make private key check less greedy and include fifth dash

Pull Request - State: closed - Opened by bplaxco 4 months ago - 4 comments

#1439 - Exit code 1, even after successfull execution

Issue - State: closed - Opened by GP-09 4 months ago - 2 comments
Labels: bug

#1438 - Gitleaks on kubernetes

Issue - State: open - Opened by jahnavisana2812 4 months ago - 1 comment
Labels: enhancement

#1437 - hang on futex

Issue - State: open - Opened by mterron 4 months ago
Labels: bug

#1436 - Generic-api-key has a lot of FN

Issue - State: open - Opened by mustafanaa 4 months ago - 1 comment
Labels: bug

#1435 - fix#1432: made changes to the reading logic

Pull Request - State: open - Opened by sapienhwaker 4 months ago

#1432 - Gitleaks detection is inconsistent in large files

Issue - State: open - Opened by adamcohen2 4 months ago - 6 comments
Labels: bug, help wanted, good first issue

#1430 - Good

Issue - State: closed - Opened by MAFLIXD 4 months ago - 1 comment
Labels: bug

#1429 - Gitleaks

Issue - State: closed - Opened by Savannah0206 4 months ago - 1 comment

#1428 - id = "hashicorp-tf-password" description = "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches." regex = '''(?i)(?:administrator_login_password|password)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}("[a-z0-9=_\-]{8,20}")(?:['|\"|\n|\r|\s|\x60|;]|$)''' keywords = [ "administrator_login_password","password", ]

Issue - State: closed - Opened by Mystic09605 4 months ago
Labels: bug

#1427 - Bugger4

Issue - State: closed - Opened by Mystic09605 4 months ago
Labels: bug

#1426 - Add check for base64 encoded "-----BEGIN PRIVATE KEY-----"

Issue - State: closed - Opened by peterHakio 4 months ago - 5 comments
Labels: enhancement

#1425 - Comments in .gitleaksignore

Issue - State: open - Opened by anthraxn8b 5 months ago
Labels: enhancement

#1424 - Off-by-one error in startColumn and endColumn calculation

Issue - State: open - Opened by leadpogrommer 5 months ago - 1 comment
Labels: bug

#1420 - Limit hashicorp-tf-password to .tf/.hcl files

Pull Request - State: closed - Opened by becojo 5 months ago

#1419 - Output contains duplicates

Issue - State: closed - Opened by m1cm1c 5 months ago - 2 comments
Labels: bug

#1418 - secrets mistaken as Terraform passwords

Issue - State: closed - Opened by elchenberg 5 months ago - 1 comment
Labels: bug

#1417 - Add NewRelic insert key detection rule

Pull Request - State: closed - Opened by danielap-ma 5 months ago

#1416 - Fix date on main site

Issue - State: closed - Opened by sergiomarotco 5 months ago

#1415 - create a release to include latest security updates

Issue - State: closed - Opened by omercnet 5 months ago - 2 comments
Labels: enhancement

#1414 - gitleaks detect missing one commit in scan

Issue - State: closed - Opened by edishu 5 months ago - 2 comments
Labels: bug

#1413 - Failed runs with errors about `artifactClient = artifact.create()`

Issue - State: closed - Opened by khoadaniel 5 months ago - 2 comments
Labels: bug

#1412 - Make from source: directions wrong

Issue - State: closed - Opened by p1r473 5 months ago - 2 comments
Labels: bug

#1410 - no hash shown in fingerprint

Issue - State: closed - Opened by j-lakeman 6 months ago - 2 comments
Labels: bug

#1409 - gitleaks does not scan correct files with pre-commit run --files

Issue - State: open - Opened by krakeusz 6 months ago - 1 comment
Labels: bug

#1408 - Add intra42 client secret

Pull Request - State: closed - Opened by alexandregv 6 months ago

#1407 - extend FB access token discovery

Pull Request - State: closed - Opened by shahar4200 6 months ago - 3 comments

#1406 - Add harness PAT and SAT rules

Pull Request - State: closed - Opened by dewan-ahmed 6 months ago - 3 comments

#1405 - Please update the deprecated way how to set output

Issue - State: open - Opened by Jiri-Stary 6 months ago
Labels: enhancement

#1404 - Improved Telegram bot token rule regex and added more test cases

Pull Request - State: closed - Opened by toxyl 6 months ago

#1403 - Add Harness Personal Access Token support

Issue - State: closed - Opened by dewan-ahmed 6 months ago
Labels: enhancement

#1402 - GitLeaks does not detect Jira api keys in source code

Issue - State: open - Opened by Maksym-Hrabar 6 months ago
Labels: bug

#1401 - Add missing GitLab token patterns

Issue - State: closed - Opened by bgoareguer 6 months ago - 1 comment
Labels: enhancement

#1400 - Secret finding is not detected when Read operation returns both n > 0 bytes and EOF

Issue - State: closed - Opened by dbrisson21 6 months ago - 1 comment
Labels: bug

#1398 - Output information for fingerprints in .gitleaksignore which does not fit to the scan.

Issue - State: closed - Opened by AnselmD 6 months ago - 1 comment
Labels: enhancement

#1397 - Enhance gitleaks:allow to be usable outside the same line

Issue - State: open - Opened by AnselmD 6 months ago - 1 comment
Labels: enhancement, help wanted

#1396 - 1634

Pull Request - State: closed - Opened by BONDSK01 6 months ago

GitHub / gitleaks/gitleaks issues and pull requests