Andrew

Minimum go version should be enforced when installing gitleaks with go get command

3

### Description: Per the go.mod file, the minimum go version is 1.16. However, this needs to be enforced with build tags. (Why is the go.mod file not sufficient to enforce...

https://github.com/zricethezav/gitleaks/blob/0d471653b5389029ab9126c35ea960b480114135/CONTRIBUTING.md?plain=1#L41 * There is not actually a section called "regex". It probably refers to the paragraph that begins with `generateSemiGenericRegex`. It would probably be more clear to have a section...

**Is your feature request related to a problem? Please describe.** As a sidekiq and gitleaks user, I want gitleaks to scan my repos for sidekiq secrets. The basic forms: *...

Add support for Job Summaries

7

### Act version act version 0.2.26 ### Feature description GitHub Actions recently added a feature called Job Summaries: https://github.blog/2022-05-09-supercharging-github-actions-with-job-summaries/ When I use `act` to run a GitHub Action that implements...

Hey guys, very cool app. I have a recommendation for improving the security a bit. The problem I noticed is that I was able to log out of my computer,...

In generic-api-key rule, ignore PublicKey and PublicKeyToken

2

**Is your feature request related to a problem? Please describe.** Capturing some rough ideas about how to possibly improve the `generic-api-key` rule... Currently the rule detects public tokens such as...

Generic rule false negative when there are many spaces

1

**Describe the bug** In terraform, the typical formatters add spaces so that everything after the equals sign is aligned like this: ``` app_settings = { "ConnectionStrings__WebApiDatabase" = "Server=tcp:${azurerm_mssql_server.this.fully_qualified_domain_name};Authentication=Active Directory Default;...

Possible false positives with aws-access-token rule

2

**Describe the bug** The `aws-access-token` rule detects IAM resource IDs. The regex contains these prefixes: `AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA` Those prefixes are associated with IAM resource IDs, which I believe are not actually...

Improve error message for MACHINE_LIMIT_EXCEEDED failure

1

When a user tries to activate too many repositories on their license, they get a message like this: ``` ❗ this repo has not been associated with the license, attempting...

GitHub Security tab: Improve readability of subject line

1

The subject of the created issue is rather ugly:  Would be great if they could look more like this:  Thanks for the report @dopey!