openvibers/openvibe.games Commits

gitleaks: allow the made-up subject id usr_01JABCDEFGHJKMNPQRSTVWXYZ0 in flusher.test.ts (a test default, matched on path and value), which the generic-api-key rule flagged in 540f672.

OP OpenVibers committed 29 Sept 2026 · 59005011ae · 1 file, +6 −0


Changes

ddiff --git a/.gitleaks.toml b/.gitleaks.toml
iindex f6b4f15..4df7bf6 100644
---- a/.gitleaks.toml
++++ b/.gitleaks.toml
@@@ -9,3 +9,9 @@ description = "Made-up player/session tokens in unit tests"
condition = "AND"
paths = ['''^packages/(persistence/src/pg/pgStore|protocol/src/codec)\.test\.ts$''']
regexes = ['''^(tok_12345678|abcdefgh12345678)$''']
++
++[[allowlists]]
++description = "A made-up canonical subject id (usr_ + a ULID-shaped alphabet run) as a test default"
++condition = "AND"
++paths = ['''^apps/server/src/game/flusher\.test\.ts$''']
++regexes = ['''^usr_01JABCDEFGHJKMNPQRSTVWXYZ0$''']