forked from apollographql/router
-
Notifications
You must be signed in to change notification settings - Fork 0
/
.gitleaks.toml
100 lines (86 loc) · 5.28 KB
/
.gitleaks.toml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
[[ rules ]]
id = "generic-api-key"
[ rules.allowlist ]
commits = [
"f12bcddc663aa4c4d90218a1bb718fe74e0e7be3",
"e1e6f93341aea383da2ec6b36a9bfcf7e63a111e",
"e5590027506337381887dadef9baadd063e05830",
# https://github.com/apollographql/router/blob/d826844c8cf433f78938059f02feecc108468e49/licenses.html#L8558
# https://github.com/apollographql/router-private/blob/d826844c8cf433f78938059f02feecc108468e49/licenses.html#L8558
"d826844c8cf433f78938059f02feecc108468e49",
]
paths = [
'''^apollo-router\/src\/.+\/testdata\/.+''',
]
[[ rules ]]
id = "private-key"
[ rules.allowlist ]
commits = [
"7fdb0a5a0831d309524e98503760c16bd3de160c",
# Example private keys for test cases
"9d6464b96eed3a20c48d5ec653bf9986757c89e5",
"74ebb0269933c703efd9143c029f69e30330478b",
# https://github.com/apollographql/router/blob/3fcb78de7c6444cd1f7fe4cca6533bcc6bf8a085/apollo-router/src/services/testdata/CA/ca.key#L1
# https://github.com/apollographql/router/blob/3fcb78de7c6444cd1f7fe4cca6533bcc6bf8a085/apollo-router/src/services/testdata/client.key#L1
# https://github.com/apollographql/router/blob/3fcb78de7c6444cd1f7fe4cca6533bcc6bf8a085/apollo-router/src/services/testdata/server.key#L1
# https://github.com/apollographql/router/blob/3fcb78de7c6444cd1f7fe4cca6533bcc6bf8a085/apollo-router/src/configuration/testdata/metrics/tls.router.yaml#L41
# https://github.com/apollographql/router-private/blob/3fcb78de7c6444cd1f7fe4cca6533bcc6bf8a085/apollo-router/src/services/testdata/client.key#L1
# https://github.com/apollographql/router-private/blob/3fcb78de7c6444cd1f7fe4cca6533bcc6bf8a085/apollo-router/src/services/testdata/CA/ca.key#L1
# https://github.com/apollographql/router-private/blob/3fcb78de7c6444cd1f7fe4cca6533bcc6bf8a085/apollo-router/src/services/testdata/server.key#L1
# https://github.com/apollographql/router-private/blob/3fcb78de7c6444cd1f7fe4cca6533bcc6bf8a085/apollo-router/src/configuration/testdata/metrics/tls.router.yaml#L41
"3fcb78de7c6444cd1f7fe4cca6533bcc6bf8a085",
]
paths = [
'''^apollo-router\/src\/.+\/testdata\/.+''',
]
[[ rules ]]
id = "jwt"
[ rules.allowlist ]
commits = [
# Example jwts
"f12bcddc663aa4c4d90218a1bb718fe74e0e7be3",
"6ff43869e0cf8ab0de8dd0e898f80c08ad135552",
"b11412918d58db34693488b29495e148dbb27cc2",
"a4ceefc8d51879330f10861438401a3a3deb316e",
"d19de3cbca36981676ff03c7f3cab113609772b1",
"3ee3d4bda9efcf4f175fdcfd59abc16cb9a4657e",
"76aaa5ec21d4fbde65676c6cf0dc265dd6daee99",
"d2b85acee5cf94120b47093f87ae80a7365d7b28",
"f107c2a42292d0c8068395f5cb8f491377559a42",
# https://github.com/apollographql/router-private/blob/0a9f1a720dc532e8c090541a59d32c9377a6320b/apollo-router/src/uplink/license_enforcement.rs#L336
# https://github.com/apollographql/router-private/blob/15c337ee5ee5003fc72ef93d570d11e73a7bd7fb/apollo-router/src/uplink/license_enforcement.rs#L341
"0a9f1a720dc532e8c090541a59d32c9377a6320b",
"15c337ee5ee5003fc72ef93d570d11e73a7bd7fb",
# https://github.com/apollographql/router-private/blob/0a9f1a720dc532e8c090541a59d32c9377a6320b/apollo-router/src/uplink/license_enforcement.rs#L351
# https://github.com/apollographql/router-private/blob/15c337ee5ee5003fc72ef93d570d11e73a7bd7fb/apollo-router/src/uplink/license_enforcement.rs#L356
"0a9f1a720dc532e8c090541a59d32c9377a6320b",
"15c337ee5ee5003fc72ef93d570d11e73a7bd7fb",
]
paths = [
'''^apollo-router\/src\/.+\/testdata\/.+''',
'''^apollo-router/src/plugins/authentication/tests.rs$'''
]
[[ rules ]]
id = "high-entropy-base64"
[ rules.allowlist ]
commits = [
# Non-Sensitive Test data
"728552f0ca934e0bc6803b803859d5c956a832d9",
]
[[ rules ]]
id = "hashicorp-tf-password"
[ rules.allowlist ]
commits = [
# https://github.com/apollographql/router/blob/fe1c3cb5d597a6521e02b3cdb1db980cf7c202b5/examples/telemetry/jaeger-collector.router.yaml#L9
# https://github.com/apollographql/router/blob/3fa7c11b0f3dfcdcade1971bd8a3996431459565/examples/telemetry/jaeger-collector.router.yaml#L11
# https://github.com/apollographql/router-private/blob/422307d33d300c896f949c2af53803f42aee9485/examples/telemetry/jaeger-collector.router.yaml#L11
# https://github.com/apollographql/router-private/blob/3fa7c11b0f3dfcdcade1971bd8a3996431459565/examples/telemetry/jaeger-collector.router.yaml#L11
# https://github.com/apollographql/router-private/blob/fe1c3cb5d597a6521e02b3cdb1db980cf7c202b5/examples/telemetry/jaeger-collector.router.yaml#L9
"fe1c3cb5d597a6521e02b3cdb1db980cf7c202b5",
"3fa7c11b0f3dfcdcade1971bd8a3996431459565",
"422307d33d300c896f949c2af53803f42aee9485",
]
paths = [
'''^apollo-router\/src\/.+\/testdata\/.+''',
'''^examples/telemetry/jaeger-collector.router.yaml$'''
]