Published module
generate-gitleaks-config.mjs
Writes the generated gitleaks config from the private value rules and the whole-file exceptions.
Takes no arguments. It writes generated.gitleaks.toml beside the script and prints Wrote <abs path>.
Only private value rules and whole-file exceptions reach gitleaks. Name rules and line-bound exceptions never do: the filters apply them afterwards.
The generated config is never committed. When you scan an old commit, regenerate it first.
More tools
All tools →- 01
patterns.mjs
The classifier and the reviewed exceptions. The other three modules import it; you can too.
- 02
filter-gitleaks-output.mjs
Reads a gitleaks JSON report, applies the reviewed exceptions and prints a counts-only summary.
- 03
filter-trufflehog-output.mjs
Reads trufflehog NDJSON on stdin, applies the whole-file exceptions and prints a counts-only summary.