diff --git a/scanners/boostsecurityio/gitleaks/boost.toml b/scanners/boostsecurityio/gitleaks/boost.toml index 9bf7212e..1274c128 100644 --- a/scanners/boostsecurityio/gitleaks/boost.toml +++ b/scanners/boostsecurityio/gitleaks/boost.toml @@ -6,7 +6,20 @@ useDefault = true [[rules]] id = "generic-api-key" - [[rules.allowlists]] - regexTarget = "line" - regexes = [ '''(?i)publicKeyToken="[^"]+"''' ] - paths = [ '''(?i)web\.config''' ] \ No newline at end of file + [[rules.allowlists]] + description = "Don't report on URI" + regexTarget = "match" + regexes = [ + '''(?i)(?:[\w]+\.)+[\w]+:[0-9]{1,5}(?:/[\w]+)+''', + ] + + [[rules.allowlists]] + regexTarget = "line" + regexes = [ '''(?i)publicKeyToken="[^"]+"''' ] + paths = [ '''(?i)web\.config''' ] + + [[rules.allowlists]] + description = "Don't report on translation" + regexTarget = "line" + regexes = [ '''(?i)xmi:type="utility:TranslatableString"''' ] + paths = [ '''(?i)\.msgflow$''' ] \ No newline at end of file