3f9352b118
So it turns out that I was wrong and that .git/config is stateful. Multiple calls to --add-provider will append the same provider each time... Instead I'm defining secret-patterns.txt and version-controlling it. Then: - dev-side: I'm adding `providers = cat ci/secret-patterns.txt` to .git/config - ci-side: I'm adding `providers = cat ci/secret-patterns.txt` to .git/config Unfortunately this is ad-hoc configuration ci-side, which I would like to avoid. The good news is that my pre-commit hooks and failures from git-secrets should now align with my CI, since they're both reading from secret-patterns.txt. One step backwards... two steps forwards?
9 lines
535 B
Text
9 lines
535 B
Text
(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}
|
|
("|')?(AWS|aws|Aws)?_?(SECRET|secret|Secret)?_?(ACCESS|access|Access)?_?(KEY|key|Key)("|')?\s*(:|=>|=)\s*("|')?[A-Za-z0-9/\+=]{40}("|')?
|
|
("|')?(AWS|aws|Aws)?_?(ACCOUNT|account|Account)_?(ID|id|Id)?("|')?\s*(:|=>|=)\s*("|')?[0-9]{4}\-?[0-9]{4}\-?[0-9]{4}("|')?
|
|
AIza[0-9A-Za-z_-]{35}
|
|
[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com
|
|
(^|[^0-9A-Za-z/+])1/[0-9A-Za-z_-]{43}
|
|
(^|[^0-9A-Za-z/+])1/[0-9A-Za-z_-]{64}
|
|
ya29\.[0-9A-Za-z_-]+
|
|
(sk|pk)_(test|live)_[a-zA-Z0-9]{99}
|