Skip to content

Fix Gitleaks allowlist regexes for localhost/127.0.0.1 - #1229

Open
lemarjohnny781 wants to merge 1 commit into
solutions-plug:mainfrom
lemarjohnny781:fix/gitleaks-allowlist-regexes-for-localhost-127-0-0
Open

Fix Gitleaks allowlist regexes for localhost/127.0.0.1#1229
lemarjohnny781 wants to merge 1 commit into
solutions-plug:mainfrom
lemarjohnny781:fix/gitleaks-allowlist-regexes-for-localhost-127-0-0

Conversation

@lemarjohnny781

@lemarjohnny781 lemarjohnny781 commented Jul 26, 2026

Copy link
Copy Markdown

Scope Gitleaks allowlist regexes so generic localhost and 127.0.0.1 substrings do not allowlist real connection strings. Added placeholder-specific permit patterns for postgres and redis URLs and validated locally with Gitleaks.

closes #1217

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug] Gitleaks allowlist regexes for localhost/127.0.0.1 are overly broad and can mask real leaked credentials

1 participant