openvibers/openvibe.host .gitleaks.toml
.gitleaks.toml
| 1 | # gitleaks configuration, used by the shared security workflow |
| 2 | # (OpenVibers/OpenVibe.Shared/.github/workflows/security.yml). The default rules stay on; every |
| 3 | # allowlist below is one proven false positive, matched on path AND value so nothing else is hidden. |
| 4 | [extend] |
| 5 | useDefault = true |
| 6 | |
| 7 | [[allowlists]] |
| 8 | description = "Fake Stripe key planted in a test deploy to prove Host rejects and never echoes secrets" |
| 9 | condition = "AND" |
| 10 | paths = ['''^test/host-secrets-dashboard\.test\.js$'''] |
| 11 | regexes = ['''^sk_live_TOPSECRET123$'''] |
| 12 |