False positives
- Dominant language
- Go
- Stars
- 29.3k
- Forks
- 2.2k
- PR merge metrics
- No merged PRs in 30d
Description
**Describe the bug**
A clear and concise description of what the bug is.
**To Reproduce**
Make a commit with the following contents and run `gitleaks` against it.
```xml
Anwendung
Anwendung
Anwendung
```
It'll generate 1 finding.
**Expected behavior**
There should be zero findings.
In XML the first two are functionally the same yet one is identified as a secret and the other is not.
It seems `id=` by itself is not a problem so neither should `key id=` where there's a space between `key` and `id`.
In any case, even if it were `KeyID` (without a space) it should be ignore because it's not a key, just the id of a key which would typically not contain the sensitive data.
**Basic Info (please complete the following information):**
- OS: Ubuntu (but probably doesn't make any difference)
- Gitleaks Version: Latest Release (8.15.2)
cc @zricethezav
Contributor guide
Assessment
This issue has not been assessed yet.