From 880389f37bf3ace6c28de550e8027a6714915690 Mon Sep 17 00:00:00 2001 From: cryptorugmunch Date: Fri, 3 Jul 2026 17:40:55 +0200 Subject: [PATCH] security(gitleaks): ignore scammer Telegram tokens in CryptoScamDB data --- .gitleaksignore | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .gitleaksignore diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..b38bbe0 --- /dev/null +++ b/.gitleaksignore @@ -0,0 +1,14 @@ +# .gitleaksignore — false positives in RMI data files +# These are Telegram bot tokens embedded in scam-site descriptions in +# CryptoScamDB data. They are indicators of compromise, not our secrets. +bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:57295 +bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:61422 +bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69759 +bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69889 +bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:70610 +# Working-tree fingerprints (no commit hash) +data/cryptoscamdb_urls.yaml:telegram-bot-api-token:57295 +data/cryptoscamdb_urls.yaml:telegram-bot-api-token:61422 +data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69759 +data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69889 +data/cryptoscamdb_urls.yaml:telegram-bot-api-token:70610 -- 2.49.1