fix ignore patches

Signed-off-by: Maksim Khimchenko <maksim.khimchenko@flant.com>

Author: himax1991

gitleaks/config/gitleaks.base.toml

@@ -13,6 +13,8 @@ useDefault = true
 # Global allowlists
 [allowlist]
 
+regexTarget = "line"
+
 # === Safe files/directories ===
 # NOTE: Use exact paths, NOT glob patterns like **/go.mod
 
@@ -21,9 +23,6 @@ paths = [
     "go.mod",
     "go.sum",
 
-    # patch files
-    ".*/*.patch",
-
     # Specific files with known false positives
     # "modules/101-cert-manager/docs/USAGE.md",
     # "modules/101-cert-manager/docs/USAGE_RU.md",
@@ -32,10 +31,10 @@ paths = [
 # === Safe patterns ===
 regexes = [
     # Go module checksums - always public
-    '''h1:[A-Za-z0-9+/=]{40,}''',
+    '''.*h1:[A-Za-z0-9+/=]{40,}''',
 
     # Public certificates (only ca.crt, NOT private keys!)
-    '''data:\s*\n\s*ca\.crt:\s*[A-Za-z0-9+/=\s]+''',
+    '''ca\.crt:\s*[A-Za-z0-9+/=]+''',
 
     # AWS Example values from official documentation - exact match
     '''AKIAIOSFODNN7EXAMPLE''',