fix: allowlist — add regexTarget=match for global allowlist; allow Python private fn on RHS

2026-04-02 23:40:26 -07:00 · 2026-04-02 23:40:26 -07:00 · 481ad4b43e
commit 481ad4b43e
parent 56b4cf010f
1 changed files with 3 additions and 0 deletions
--- a/gitleaks.toml
+++ b/gitleaks.toml
@ -61,4 +61,7 @@ regexes = [
    'sk-abcdefghijklmnopqrstuvwxyz',
    'your-forgejo-api-token-here',
    'your-[a-z\-]+-here',
+    # Python private function/variable on RHS — token = _some_func() is not a secret
+    '=\s+_[a-z_]{10,}',
 ]
+regexTarget = "match"