diff --git a/configs/gitleaks.toml b/configs/gitleaks.toml index 1183b6b..8099ccb 100644 --- a/configs/gitleaks.toml +++ b/configs/gitleaks.toml @@ -1,17 +1,20 @@ [[rules]] +id = "jdbc-credentials" description = "JDBC connection string with credentials" regex = '''jdbc:[^"]*user=.*&password=.*|jdbc:[^"']*:[^"']*@[^"']*''' tags = ["credentials","db","jdbc"] severity = "high" [[rules]] +id = "db-password-assignment" description = "Generic DB password assignment" regex = '''(?i)(db|database|jdbc|connection).*(password|passwd)\s*[:=]\s*['"][^'"]+['"]''' tags = ["credentials"] severity = "high" [[rules]] +id = "hardcoded-password" description = "Hardcoded Password" regex = '''(?i)(password|passwd|pwd)\s*[:=]\s*['"][^'"]+['"]''' tags = ["password", "security"] -severity = "high" \ No newline at end of file +severity = "high"