$ ./gitleaks config
title = 'Gitleaks development'

[extend]
  useDefault = true

[[rules]]
  id = '1password-service-account-token'
  description = 'Uncovered a possible 1Password service account token, potentially compromising access to secrets in vaults.'
  regex = 'ops_eyJ[a-zA-Z0-9 /]{250,}={0,3}'
  entropy = 4.0
  keywords = ['ops_']

...

[allowlist]
  condition = 'OR'
  paths = ['(^|/)cmd/generate/config/rules', 'gitleaks\.toml', '(?i)\.(bmp|gif|jpe?g|svg|tiff?)$', '\.(eot|[ot]tf|woff2?)$', '(.*?)(doc|docx|zip|xls|pdf|bin|socket|vsidx|v2|suo|wsuo|.dll|pdb|exe|gltf)$', 'go\.(mod|sum|work(\.sum)?)$', '(^|/)vendor/modules\.txt$', '(^|/)vendor/(github\.com|golang\.org/x|google\.golang\.org|gopkg\.in|istio\.io|k8s\.io|sigs\.k8s\.io)/.*$', '(^|/)gradlew(\.bat)?$', '(^|/)gradle\.lockfile$', '(^|/)mvnw(\.cmd)?$', '(^|/)\.mvn/wrapper/MavenWrapperDownloader\.java$', '(^|/)node_modules/.*?$', '(^|/)package-lock\.json$', '(^|/)yarn\.lock$', '(^|/)pnpm-lock\.yaml$', '(^|/)npm-shrinkwrap\.json$', '(^|/)bower_components/.*?$', '(^|/)(angular|jquery(-?ui)?|plotly|swagger-?ui)[a-zA-Z0-9.-]*(\.min)?\.js(\.map)?$', '(^|/)(Pipfile|poetry)\.lock$', '(?i)/?(v?env|virtualenv)/lib(64)?/. $', '(?i)(^|/)(lib(64)?/python[23](\.\d{1,2}) /|python/[23](\.\d{1,2}) /lib(64)?/). $', '(?i)(^|/)[a-z0-9_.] -[0-9.] \.dist-info/. $', '(^|/)vendor/(bundle|ruby)/.*?$', '\.gem$', 'verification-metadata.xml', 'Database.refactorlog']
  regexes = ['(?i)^true|false|null$', '^(?i:a |b |c |d |e |f |g |h |i |j |k |l |m |n |o |p |q |r |s |t |u |v |w |x |y |z |\* |\. )$', '^\$(\d |{\d })$', '^\$([A-Z_] |[a-z_] )$', '^\${([A-Z_] |[a-z_] )}$', '^\{\{[ \t]*[\w ().|] [ \t]*}}$', "^\\$\\{\\{[ \\t]*((env|github|secrets|vars)(\\.[A-Za-z]\\w ) [\\w \"'&./=|]*)[ \\t]*}}$", '^%([A-Z_] |[a-z_] )%$', '^%[ \-# 0]?[bcdeEfFgGoOpqstTUvxX]$', '^\{\d{0,2}}$', '^@([A-Z_] |[a-z_] )@$']