asherah/tartufo.toml at main · godaddy/asherah · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
[tool.tartufo]
json = false
regex = true
entropy = true

exclude-signatures = [
    { signature = "13c9d46245326e1995825a10ef733a7971bff3d293d58afa9ab16fb3770be8fb", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "5c26481a67a11bad0844db1cb4f5107e2ff2c8ccac4d77e27ebead916f0148fa", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "ae0ba571291755ac449e4fc6eb110e33faaf150f95b94a9ded06a925b07b79d0", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "bcd4bc83e3131567f85a21619ff810b7c8d8b01c7fa2fb2fa26b950b1ce526ce", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "23092a312f381b03347247bd874618b71df0069d42f5fa5343816fcee1cd1421", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "68aca477af868994b50620c412178789b05f70e34a4d2cc74694ab91f423397d", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "2889354774c90341ab3f702d8fe5f41e9ba202174b149d717d633b4093f9a85b", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "6e5fdaf1037c89aaff33729a6ed74131786816cc5d2aa81cbf5f235a93cfa4b8", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "a3fec2f6b84270361f3b24854ef8de5af2d757263c80e61180ed6ad8b9040c22", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "1ddecb6f7fe1f06d7c0dbbbce40ec3de3054e45b78be3beec02e47e0a7c34de8", reason = "High entropy findings for images and keys used in documentation"},
    { signature = "004359c84fb457b50fb329f4ba31563e7260e55d08794a66e48969f03a54b8ac", reason = "High entropy findings for images and keys used in documentation"},

    { signature = "6aecdbffd5066a9a5e366e2587cc6b8ca420d0d3600212039c7819824a5cf5fd", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Java Tests"},
    { signature = "db4e5dccdd961ff01677023444541035042cc6de3e24282e67924719d35dfa58", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Java Tests"},
    { signature = "d5c65da2e2ddce6a92cd94567fb3074f35cfd439b104a59f48b17eaed25b0264", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Java Tests"},
    { signature = "c9dcce093cdfb3ac2a36e4965c99e2158829db17d5ed9d048f9e4c576c1ad022", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Java Tests"},
    { signature = "de10bc1f76e947229b1776fa57e77f0202dc8d93ea63d0095e176a88e6bc1ff0", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Java Tests"},
    { signature = "b86d3814dca4cf16040fcab622aa7f2a64580f76c8d53375b856f9b9bfc1268f", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Java Tests"},

    { signature = "22e96c67180d02680b20da99db5e66230c28c1e4bc56c3466ab78c14b2db34f1", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "401d63dda8263930a4b1e8757165b007069ed02bcd4215102cd31c1858598b45", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "c53f7f1b0b498aca0267ded021ed01d870472fda40c31ca7b79914e927c6fe56", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "a713c3e6f0a0e326918bf6c25533d8ede8b34d90abeb85bf0f6244bceb3355ef", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "377d55d9391c794a5299949da3e52b754be03589f26c19717bab181db6af715c", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "c887558b4389d43eb6c5185f9a240f297262c82e9f678668d8e2d603d207f035", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "1a8025e8fd5ceeff91ae9a019d84343dc610de309acda3fe9f21073e0a57d36e", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "16c64aef4111d8351450cf8f21642c42380b8a30169a9ebea6268fcfce9ae30e", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "ee055597991a96007871924cc78144206929d7d1288b0c9285267585b7521a83", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "7af446be35c398e3768117b9e1efaa71c5341aeffe3182a9d8c13ce0a3aa13d3", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "42de3eb97162b9b94030b59695ca44bde457a969f97a00089ae82919518eeaf1", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "b1204a9d074ae04eaf94aa244195c41dd2ca5c463d2f655b730c6a2f1b50fb42", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "0637850be3829dc235fae4784a89685f7737de1f235fe6540e742eed1271756c", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "e34175b04464dd09c1ac6efce79597f650cf8c11bdf4304e63aab68c0736a356", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "e82758f33c162b35d2127c2298c9eedfd5bf8c96548c71e1e6b47170c3d18f13", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "d99b60d74ea9b225cc6d620c4717511bed5d6b13dec8c8faac1459cb6f9e5058", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "f8cf368cc27e574b8b7be9c44a8acddde37a4c9913165a131cdedc8643c8f51e", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "fca986376897e4e96bf761116cf6322ad7533e06b280c1230a913be2b81a9600", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "9d83d9db5f8ee8be59f7e702019cb8e96a6d2a386ef8b086f08cd9ae9c4f77dc", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "a73a67096b1617cbd910ea0679f04ea95a07eda93d0f6503337ad96c88ceb582", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "a0d6e07efe23997f55aca378cf73b2260daeab38e753bf79507464117c10aa36", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "c11e867730d1be9bc95756cad32071f87f77caff7481dc88b2d63a4ab1bd56c7", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "d15dd36862db90fb36a7dd1fedf86e4a788d6bf9d0909277178835935c031eb1", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "32117105ca45b4f667129e36b8404dbf381c3e9a9d6351e0d24dd06250e2d362", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "c27e0c0647a36a9746ccf7021a305b4142ff26441c5770d682f251184c44b70d", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "d8112530208e30e0a03666404d700d450d6cc254b8df8baba7b6b1b8451a715e", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "e346648381b2a4869f25c33f3de8e75df24957f6bee12090334251e2bca10873", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "24612c6eae3c6f9edeb76693844f96b5b4799c4252b155639907dc6e900a7c93", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "a4ea5817e072966bb7bfd712b89687465641b1ba58fba56eb35ef62755c0a5bd", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "299353a36f065d32601c2ce91e9a705d0ab16457c74e227e0fe34e82e42153ca", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "cf90106ca7fcc09ff9d8f07a2ea8f9f02a0758f26031808d1cc1f4d38c712f58", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "5923f959a8738aacb46e92db00f78d64eaa0121fe33edbf3571d676f1355d08c", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},
    { signature = "4244fda6859ee07323c9787a7fd65a7afb3f001019ca5a362b77a0a1fb63ccda", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in C# tests"},

    { signature = "0d4a2e3037d931239373f7f547542616cc64fc583072029e6b3a2e77e8b7f89e", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "3b43730726f7dd09bb41870ddb5b65e77b6b2b8aab52f40e9237e6d2423cfcb3", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "2c4e373ba88c24effee7492a4da6e74f9a79630d253f42858c90fa1772455382", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "408a57afeec6246d18b0167a0ef4e036932bc74cd5395e346bcf20f8972afdd7", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "e695f8158b4b1b024f6334eaf8a3577c77e7bb39f122edc35b99dfa5d446e04c", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "7f82501e948553b8e6051471f224ebd52b58477e08c017ad1eb41b464e8a5e29", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "5906e20274a98285efda4d184907f899944aeb8b41b5babffbbd8f6bc8645dc1", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "4fd64eba4d0cd313fb11a4426164090b479e283694c9f78e0b5dfd1ee0bfb1a4", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "2ac463d9e220f2f5b390ffffacdb8c66f6f06514221e5be52119fb7c084f9c39", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "c65c037a27933dba05fec232a3943633143f21ad48e8324f107df4ff467feba7", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "87051e93075d9739fd69dece05a11c62ed5f3a97962921ecfd6cbc4aa43b32b5", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "6b38b896135b6fcb90c4b9f50c7752da8113d6e2353b4d7daa74c7e9b2959281", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},
    { signature = "ef3d6c584d7960dc47d93039f4b349b1380224ba868d2acaa55e3d559915121e", reason = "High entropy findings (dummy encryoted payloads, fake keys, method names, etc.) in Go Tests"},

    { signature = "4d6443395d44706153c79440909aba82f18d12a844ae53c18db412044d0fb79f", reason = "Constant the contains the A-Z character set in Node client for gRPC server"},

    { signature = "5abe0b15fb1c4a36ff72793f3592175074da8fe5801fa332eebc27a620aa6ae7", reason = "Constant the contains the A-Z character set in Go sample app"},

    { signature = "512997ded2fc06da7219e6f482bf36924e859cd93daede3af25b4c8155940676", reason = "Reference to GitHub issues and commit SHAs in code comments"},
    { signature = "dabb2b93e6cc3250841fd1badd3f7d6a77de6c98aea8a9d699d7917fa8299f7b", reason = "Reference to GitHub issues and commit SHAs in code comments"},

    { signature = "8cde955170a11afe8859722e054a593c096c41c3d4941336f6ae116f6d71fcc9", reason = "High entropy findings in C# tutorial for Amazon ECS"},
    { signature = "81cf261e99da4bff783e7fcddb2ed25d90fab710f8e52b2f35c289a5ecbcd2bd", reason = "High entropy findings in C# tutorial for Amazon ECS"}
]

exclude-path-patterns = [
    {path-pattern = '.*/(L|LL)P64/.*', reason = 'Exclude LP64 paths'},
    {path-pattern = '.*\.DotSettings', reason = 'Exclude DotSettings files'},
    {path-pattern = '.*/go.mod', reason = 'Exclude go.mod files'},
    {path-pattern = '.*/go.sum', reason = 'Exclude go.sum files'},
    {path-pattern = '.*/go.work.sum', reason = 'Exclude go.work.sum files'},
    {path-pattern = '.*/package.json', reason = 'Exclude node dependency files'},
    {path-pattern = '.*/package.lock.json', reason = 'Exclude node dependency files'},
    {path-pattern = 'tartufo.toml', reason = 'Exclude tartufo config file'},
]

exclude-entropy-patterns = [
    {path-pattern = '\.github/(workflows|actions)/.*\.yml$', pattern = 'uses: .*@[a-zA-Z0-9]{40}', reason = 'GitHub Actions'}
]