openvibers/openvibe.games .gitleaks.toml
.gitleaks.toml
| 1 | # gitleaks configuration, used by the shared security workflow |
| 2 | # (OpenVibers/OpenVibe.Shared/.github/workflows/security.yml). The default rules stay on; every |
| 3 | # allowlist below is one proven false positive, matched on path AND value so nothing else is hidden. |
| 4 | [extend] |
| 5 | useDefault = true |
| 6 | |
| 7 | [[allowlists]] |
| 8 | description = "Made-up player/session tokens in unit tests (sqlite/sqliteStore.test.ts: the same token in the first commit, before the PostgreSQL move)" |
| 9 | condition = "AND" |
| 10 | paths = ['''^packages/(persistence/src/pg/pgStore|persistence/src/sqlite/sqliteStore|protocol/src/codec)\.test\.ts$'''] |
| 11 | regexes = ['''^(tok_12345678|abcdefgh12345678)$'''] |
| 12 | |
| 13 | [[allowlists]] |
| 14 | description = "A made-up canonical subject id (usr_ + a ULID-shaped alphabet run) as a test default and as the identity field hello must ignore" |
| 15 | condition = "AND" |
| 16 | paths = ['''^(apps/server/src/game/flusher|packages/protocol/src/codec)\.test\.ts$'''] |
| 17 | regexes = ['''^usr_01JABCDEFGHJKMNPQRSTVWXYZ0$'''] |
| 18 |