runanywhere-sdks/.gitleaks.toml at main · RunanywhereAI/runanywhere-sdks · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
# =============================================================================
# Gitleaks Configuration — RunAnywhere SDK Monorepo
#
# Custom rules supplement gitleaks' built-in detectors (AWS keys, JWTs, etc.).
# These catch RunAnywhere-specific secrets and internal infrastructure URLs.
# =============================================================================

title = "RunAnywhere Secret Scanning"

# -----------------------------------------------------------------------------
# Custom Rules
# -----------------------------------------------------------------------------

[[rules]]
id = "runanywhere-api-key"
description = "RunAnywhere API key (runa_prod_*, runa_dev_*, runa_staging_*)"
regex = '''runa_(prod|dev|staging)_[A-Za-z0-9_\-]{10,}'''
keywords = ["runa_prod", "runa_dev", "runa_staging"]

[[rules]]
id = "railway-app-url"
description = "Railway production/staging app URL"
regex = '''https?://[a-zA-Z0-9\-]+\.up\.railway\.app'''
keywords = ["railway.app"]

[[rules]]
id = "supabase-url"
description = "Supabase project URL (non-placeholder)"
regex = '''https://[a-z0-9]+\.supabase\.co'''
keywords = ["supabase.co"]

[[rules]]
id = "supabase-anon-key"
description = "Supabase anon/service key"
regex = '''eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9\.[A-Za-z0-9_\-]{20,}\.[A-Za-z0-9_\-]{20,}'''
keywords = ["eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9"]

# -----------------------------------------------------------------------------
# Allowlists — paths and patterns that are safe to ignore
# -----------------------------------------------------------------------------

[allowlist]
description = "Global allowlist"

paths = [
    '''\.gitleaks\.toml$''',
    '''CLAUDE\.md$''',
    '''\.cursor/plans/.*\.plan\.md$''',
    '''thoughts/.*\.md$''',
]

regexTarget = "line"
regexes = [
    '''YOUR_PRODUCTION_API_KEY''',
    '''YOUR_PRODUCTION_BASE_URL''',
    '''YOUR_''',
    '''placeholder''',
    '''https://placeholder\.supabase\.co''',
]