Merge pull request 'security(gitleaks): ignore scammer Telegram tokens in CryptoScamDB data' (#1) from security/gitleaks-ignore-scam-tokens into main
Some checks failed
CI / build (push) Failing after 2s

This commit is contained in:
Crypto Rug Munch 2026-07-03 17:42:12 +02:00
commit 1e71d4ae4e

14
.gitleaksignore Normal file
View file

@ -0,0 +1,14 @@
# .gitleaksignore — false positives in RMI data files
# These are Telegram bot tokens embedded in scam-site descriptions in
# CryptoScamDB data. They are indicators of compromise, not our secrets.
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:57295
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:61422
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69759
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69889
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:70610
# Working-tree fingerprints (no commit hash)
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:57295
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:61422
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69759
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69889
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:70610