gitleaks / gitleaks/gitleaks

False positives

Open
#1,075 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Go
Stars
29.3k
Forks
2.2k
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**
A clear and concise description of what the bug is.

**To Reproduce**
Make a commit with the following contents and run `gitleaks` against it.

```xml


Anwendung


Anwendung


Anwendung

```

It'll generate 1 finding.

**Expected behavior**

There should be zero findings.

In XML the first two are functionally the same yet one is identified as a secret and the other is not.

It seems `id=` by itself is not a problem so neither should `key id=` where there's a space between `key` and `id`.

In any case, even if it were `KeyID` (without a space) it should be ignore because it's not a key, just the id of a key which would typically not contain the sensitive data.

**Basic Info (please complete the following information):**
- OS: Ubuntu (but probably doesn't make any difference)
- Gitleaks Version: Latest Release (8.15.2)

cc @zricethezav

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.