feat(gitleaks-rules): added gitleaks rules specific to azure sensitiv…

…e values
rios0rios0 · Sep 27, 2024 · b4f51a4 · b4f51a4
1 parent ec4e41e
commit b4f51a4
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -22,6 +22,7 @@ Exceptions are acceptable depending on the circumstances (critical bug fixes tha
 - added `clone.sh` script into the root
 - added Python pipelines for GitHub actions
 - added `test:build` for `golang` projects for `gitlab`
+- added rules for `azure` specific sensitive values
 - added command to run `e2e` tests
 
 ### Changed

diff --git a/global/scripts/gitleaks/.gitleaks.toml b/global/scripts/gitleaks/.gitleaks.toml
@@ -556,6 +556,11 @@ id = "Social Security Number"
 description = "Social Security Number"
 regex = '''\d{3}-\d{2}-\d{4}'''
 
+[[rules]]
+id = "Confidential UUID"
+description = "Hardcoded Application ID (UUID)"
+regex = '''[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}'''
+
 [allowlist]
 description = "global allow lists"
 regexes = ['''219-09-9999''', '''078-05-1120''', '''(9[0-9]{2}|666)-\d{2}-\d{4}''', '''(LTAI)(?i)[a-z0-9]{20}''']