openvibers/openrestream .gitleaks.toml
.gitleaks.toml
| 1 | # gitleaks configuration, used by the shared security workflow |
| 2 | # (OpenVibers/OpenVibe.Shared/.github/workflows/security.yml). The default rules stay on; every |
| 3 | # allowlist below is one proven false positive, matched on path AND value so nothing else is hidden. |
| 4 | [extend] |
| 5 | useDefault = true |
| 6 | |
| 7 | [[allowlists]] |
| 8 | description = "Made-up destination stream keys in tests that prove keys are write-only and encrypted at rest" |
| 9 | condition = "AND" |
| 10 | paths = ['''^test/(destinations-ui|keys)\.test\.js$'''] |
| 11 | regexes = ['''^live_(abcdef_9876|1234567890_secret)$'''] |
| 12 |