secret check toml rules

.gitleaks.toml

@@ -8,3 +8,17 @@ useDefault = true
 # See https://github.com/zricethezav/gitleaks#configuration
 # for details of extending this configuration for allowlists,
 # etc
+
+title = "Custom Secret Rules"
+[[rules]]
+id = "custom-access-key"
+description = "Detect hardcoded access keys"
+regex = '''ACCESS_KEY_[A-Z_0-9]+ = ["'][A-Za-z0-9!@#$%^&*()_+=\-]+["']'''
+tags = ["key"]
+
+[[rules]]
+id = "custom-password"
+description = "Detect hardcoded passwords"
+regex = '''password\s*=\s*["'][A-Za-z0-9!@#$%^&*()_+=\-]+["']'''
+tags = ["password"]
+