openvibers/openvibe.contracts Commits

gitleaks: the sample realtime tickets in the network.realtime-ticket-result fixtures (empty payload, literal "signature") are allowlisted by path and value

OP OpenVibers committed 26 Sept 2026 · 1152494b22 · 1 file, +6 −0





Changes
ddiff --git a/.gitleaks.toml b/.gitleaks.toml
iindex da976373..872cbcd0 100644
---- a/.gitleaks.toml
++++ b/.gitleaks.toml
@@@ -51,3 +51,9 @@ description = "The made-up GitHub token in the network.github-token-result fixtu
  condition = "AND"
  paths = ['''^fixtures/network\.github-token-result/(valid/env|invalid/unknown-source)\.json$''']
  regexes = ['''^ghp_0123456789[A-Za-z0-9]*$''']
++
++[[allowlists]]
++description = "Sample realtime tickets in network.realtime-ticket-result fixtures: an empty payload and the literal signature \"signature\" (base64 c2lnbmF0dXJl), a shape example, not a token"
++condition = "AND"
++paths = ['''^fixtures/network\.realtime\-ticket\-result/(valid|invalid)/[a-z-]+\.json$''']
++regexes = ['''^eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9\.eyJ0eXAiOiJyZWFsdGltZSJ9\.c2lnbmF0dXJl$''']