From a8f9b9cd476566cd815195a00d5af1f8c8653e3e Mon Sep 17 00:00:00 2001 From: Practicalli Engineering Date: Sun, 2 Jun 2024 23:37:52 +0100 Subject: [PATCH] dev: megalinter config files gitleaks & lychee --- .github/config/gitleaks.toml | 23 +++++++++++++++++++++++ .github/config/lychee.toml | 27 +++++++++++++++++++++++++++ 2 files changed, 50 insertions(+) create mode 100644 .github/config/gitleaks.toml create mode 100644 .github/config/lychee.toml diff --git a/.github/config/gitleaks.toml b/.github/config/gitleaks.toml new file mode 100644 index 0000000..c932206 --- /dev/null +++ b/.github/config/gitleaks.toml @@ -0,0 +1,23 @@ +title = "gitleaks config" + +[allowlist] +description = "global allow lists" +paths = [ + '''gitleaks.toml''', + '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket)$''', + '''(go.mod|go.sum)$''', + '''gradle.lockfile''', + '''node_modules''', + '''package-lock.json''', + '''pnpm-lock.yaml''', + '''Database.refactorlog''', + '''vendor''', +] + +[[rules]] +description = "AWS Example API Key" +id = "aws-example-api-key" +regex = '''AKIAIOSFODNN7EXAMPLE''' +keywords = [ + "awstoken", +] diff --git a/.github/config/lychee.toml b/.github/config/lychee.toml new file mode 100644 index 0000000..aa7589e --- /dev/null +++ b/.github/config/lychee.toml @@ -0,0 +1,27 @@ + +# ---------------------------------------- +# Base URL or website root directory to check relative URLs. +base = "https://practical.li/" + +# Only test links with the given schemes (e.g. https). +# Omit to check links with any other scheme. +# At the moment, we support http, https, file, and mailto. +scheme = ["https"] + +# ---------------------------------------- +# Exclusions + +# Exclude URLs and mail addresses from checking (supports regex). +exclude = ['^https://www\.linkedin\.com', '^https://127.0.0.0'] + +# Exclude these filesystem paths from getting checked. +exclude_path = ["mkdocs.yml", "overrides", "includes", ".github", ".git"] + +# Exclude all private IPs from checking. +# Equivalent to setting `exclude_private`, `exclude_link_local`, and +# `exclude_loopback` to true. +exclude_all_private = true + +# Check mail addresses +include_mail = false +# ----------------------------------------