Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update the use of allowlist and add ignorelist for gitleaks.toml files #1344

Open
gregorysprenger opened this issue Feb 14, 2024 · 1 comment
Labels
enhancement New feature or request

Comments

@gregorysprenger
Copy link

Is your feature request related to a problem? Please describe.
Currently, the use of the [allowlist] table is used to ignore file paths and regexes. I have overlooked this several times as I consider allowlist = only allow these files should be checked.

Describe the solution you'd like
Update [allowlist] to be as the name suggests - only files/regexes listed in this table should be checked. Also, implement an [ignorelist] table, where any path/regex is ignored.

cc @zricethezav

@gregorysprenger gregorysprenger added the enhancement New feature or request label Feb 14, 2024
@nunofranciscomoreira
Copy link

What you're describing doesn't align with the concept of an allow list. An allow list, as the name implies, grants permission for certain actions or items. In this scenario, it permits the existence of secrets either within specified paths or those that match certain regex patterns.

It appears that what you're seeking is more akin to defining a scope rather than implementing an allow list. This distinction suggests it's a specific requirement tailored to your needs rather than a fundamental function of the tool.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants