badlist.txt filters out valid secrets when "no-verification" is used

[AlfredBerg]

TruffleHog Version

trufflehog 3.81.9

Trace Output

Expected Behavior

The slack webhook should be detected

Actual Behavior

The detector finds the webhook, but it is then filtered out by FilterKnownFalsePositives. The slack webhook is filtered out here

trufflehog/pkg/detectors/falsepositives.go

Line 82 in 3b0b290

return true, "matches wordlist: " + m.MatchString()

since it matches https: over in the badlist

trufflehog/pkg/detectors/badlist.txt

Line 210 in 3b0b290

https:

At least https: and http: should probably be removed from that list.

Steps to Reproduce

1. Create a file named slack with a valid slack webhook (looks something like https://hooks.slack.com/services/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, this one is not valid though)
2. run trufflehog --no-update filesystem slack
3. The secret is not detected

Environment

• OS: Debian GNU/Linux 12

Additional Context

References

• IsKnownFalsePositive incorrectly marks value as false-positive #1953