mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-09-10 09:35:39 +00:00
UNITRONIX
feb3d19987
- Updated .gitignore to include new binary paths and retain .gitkeep. - Modified Gitleaks configuration to ignore additional directories. - Adjusted CI workflows to prevent execution on version bump pushes and improved version bump handling in scripts. - Bumped BetterDesk Console Manager version to 3.3.136 in betterdesk.sh and related scripts.
42 lines
1.3 KiB
TOML
42 lines
1.3 KiB
TOML
# Gitleaks configuration for BetterDesk
|
|
# Suppresses false positives from auto-generated lock files
|
|
|
|
title = "BetterDesk Gitleaks Config"
|
|
|
|
[allowlist]
|
|
description = "Allowlisted files and patterns"
|
|
|
|
# Cargo.lock files contain crate checksums and dependency names like
|
|
# "crypto_secretbox" that trigger generic-api-key false positives.
|
|
paths = [
|
|
'''.*Cargo\.lock$''',
|
|
'''.*package-lock\.json$''',
|
|
'''docs/private/''',
|
|
'''scripts/check-no-sensitive-paths\.sh''',
|
|
'''\.cargo-cache/''',
|
|
'''node_modules/''',
|
|
'''betterdesk-agent-client/src-tauri/binaries/''',
|
|
'''betterdesk-agent-client/src-tauri/target/''',
|
|
'''rdclient-desktop/src-tauri/target/''',
|
|
'''betterdesk-mgmt/''',
|
|
]
|
|
|
|
# Operator-specific infrastructure fingerprints — must not reappear in tracked files.
|
|
[[rules]]
|
|
id = "betterdesk-internal-lan-ip"
|
|
description = "Known internal LAN IP used in operator docs (use 203.0.113.x instead)"
|
|
regex = '''192\.168\.0\.110'''
|
|
tags = ["betterdesk", "infrastructure"]
|
|
|
|
[[rules]]
|
|
id = "betterdesk-operator-home-path"
|
|
description = "Developer home path that must not be committed"
|
|
regex = '''/home/unitronix'''
|
|
tags = ["betterdesk", "infrastructure"]
|
|
|
|
[[rules]]
|
|
id = "betterdesk-operator-ssh"
|
|
description = "SSH user@internal IP pattern from operator runbooks"
|
|
regex = '''unitronix@192\.168'''
|
|
tags = ["betterdesk", "infrastructure"]
|