Zach Rice

Regex is (almost) all you need How Gitleaks combines regex, entropy, and allowlists to find secrets

Let me know if you have any questions. lookingatcomputer.substack.com/p/regex-is-a... is a decent primer on how the secret detection engine works.

the default generic rule attempts to balance tp w/ fps. Sorry it's EXTREMELY disappointing. You can run with `--log-level=debug` to see why it didn't detect some of those. Gitleaks has a very easy to use config system where you can tweak the detection behavior.

TIL `cal`

cute