RugMunchMedia/rmi-backend
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
rmi-backend/.gitleaksignore
cryptorugmunch 6ccb96ae36
Some checks failed
CI / build (push) Failing after 3s
Details
build(rmi-backend,audit): add .gitleaksignore + .gitleaks.toml (P1.11) + STATUS.md (P1.12) 
Phase 1 wrap-up of AUDIT-2026-Q3:

- .gitleaksignore: appends 28 false-positive fingerprints to existing
  10. All hit on public ERC-20/Solana token contract addresses (USDC,
  WETH, MATIC, BONK, DAI in main.py.bak + test fixtures + the
  cryptoscam-address DB we DETECT). None are RMI secrets.
- .gitleaks.toml: [allowlist] paths = 7 affected files. Active
  suppression that drops the working-tree scan from 24 -> 0 findings
  (and full-history from 28 -> 0).
- STATUS.md: Phase-1 status snapshot. 12 commits this session. Author
  canonical: cryptorugmunch <admin@rugmunch.io>. 2 gating CI jobs
  (build, test). Phase 1 DoD all met. Phase 2 (delete dead code)
  starts next.
2026-07-06 18:44:00 +02:00

48 lines
5.5 KiB
Text
Raw Permalink Blame History

# .gitleaksignore — false positives in RMI data files
# These are Telegram bot tokens embedded in scam-site descriptions in
# CryptoScamDB data. They are indicators of compromise, not our secrets.
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:57295
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:61422
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69759
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69889
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:telegram-bot-api-token:70610
# Working-tree fingerprints (no commit hash)
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:57295
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:61422
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69759
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:69889
data/cryptoscamdb_urls.yaml:telegram-bot-api-token:70610
# === AUDIT-2026-Q3 Phase 1.11 (Jul 6 2026) ===
# 28 false-positive findings - public ERC-20/Solana token contract addresses
# (USDC, WETH, MATIC, BONK, DAI) and CryptoScamDB scam-URL dataset entries.
# These are public-by-design blockchain metadata; NOT RMI secrets.
# All suppressed via .gitleaks.toml [allowlist] paths as well.
bde2f3a97dd4243542d6b0f12761c743944214c9:app/cross_chain_whale.py:generic-api-key:825 # app/cross_chain_whale.py:825 secret=EPjFWdd5AufqSS...
bde2f3a97dd4243542d6b0f12761c743944214c9:app/test_bundler_detect.py:generic-api-key:136 # app/test_bundler_detect.py:136 secret=0x1234567890ab...
bde2f3a97dd4243542d6b0f12761c743944214c9:app/test_clone_scanner.py:generic-api-key:115 # app/test_clone_scanner.py:115 secret=0xabc123def456...
bde2f3a97dd4243542d6b0f12761c743944214c9:main.py.bak:generic-api-key:6375 # main.py.bak:6375 secret=0xA0b86991c621...
bde2f3a97dd4243542d6b0f12761c743944214c9:main.py.bak:generic-api-key:6376 # main.py.bak:6376 secret=0x7D1AfA7B718f...
bde2f3a97dd4243542d6b0f12761c743944214c9:main.py.bak:generic-api-key:6377 # main.py.bak:6377 secret=DezXAZ8z7PnrnR...
bde2f3a97dd4243542d6b0f12761c743944214c9:main.py.bak:generic-api-key:6378 # main.py.bak:6378 secret=0x6B175474E890...
bde2f3a97dd4243542d6b0f12761c743944214c9:tests/unit/test_cross_chain_whale.py:generic-api-key:86 # tests/unit/test_cross_chain_whale.py:86 secret=EPjFWdd5AufqSS...
bde2f3a97dd4243542d6b0f12761c743944214c9:tests/unit/test_cross_chain_whale.py:generic-api-key:99 # tests/unit/test_cross_chain_whale.py:99 secret=EPjFWdd5AufqSS...
bde2f3a97dd4243542d6b0f12761c743944214c9:tests/unit/test_cross_chain_whale.py:generic-api-key:114 # tests/unit/test_cross_chain_whale.py:114 secret=EPjFWdd5AufqSS...
bde2f3a97dd4243542d6b0f12761c743944214c9:tests/unit/test_cross_chain_whale.py:generic-api-key:134 # tests/unit/test_cross_chain_whale.py:134 secret=EPjFWdd5AufqSS...
bde2f3a97dd4243542d6b0f12761c743944214c9:tests/unit/test_dex_pool_manipulation.py:generic-api-key:27 # tests/unit/test_dex_pool_manipulation.py:27 secret=0xC02aaA39b223...
bde2f3a97dd4243542d6b0f12761c743944214c9:tests/unit/test_dex_pool_manipulation.py:generic-api-key:28 # tests/unit/test_dex_pool_manipulation.py:28 secret=0xA0b86991c621...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:2758 # data/cryptoscamdb_urls.yaml:2758 secret=0x85f3e26a776c...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:14393 # data/cryptoscamdb_urls.yaml:14393 secret=0x05fbf1e3f105...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:14427 # data/cryptoscamdb_urls.yaml:14427 secret=0x05fBf1E3f105...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:16907 # data/cryptoscamdb_urls.yaml:16907 secret=0x63cfa80bbbee...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:19730 # data/cryptoscamdb_urls.yaml:19730 secret=0x588C0e4Af4bB...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:19893 # data/cryptoscamdb_urls.yaml:19893 secret=0x588c0e4af4bb...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:20449 # data/cryptoscamdb_urls.yaml:20449 secret=0xf203d1985247...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:21354 # data/cryptoscamdb_urls.yaml:21354 secret=0x05fbf1e3f105...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:27497 # data/cryptoscamdb_urls.yaml:27497 secret=0x8b9310E47cd2...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:34682 # data/cryptoscamdb_urls.yaml:34682 secret=0x5496D2E076C2...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:36622 # data/cryptoscamdb_urls.yaml:36622 secret=0x0591a4218899...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:37383 # data/cryptoscamdb_urls.yaml:37383 secret=0x9273d7cccd00...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:43351 # data/cryptoscamdb_urls.yaml:43351 secret=0x144826ded37a...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:45480 # data/cryptoscamdb_urls.yaml:45480 secret=0x18ffda6e1033...
bde2f3a97dd4243542d6b0f12761c743944214c9:data/cryptoscamdb_urls.yaml:generic-api-key:62142 # data/cryptoscamdb_urls.yaml:62142 secret=AIzaSyAZ_-BfVV...
Reference in a new issue View git blame Copy permalink