openvibers/openvibe.link .gitleaksignore
.gitleaksignore
| 1 | # The memory fixtures hold fake secrets on purpose: every adapter |
| 2 | # carries one secret of a different shape, and the test proves none of them |
| 3 | # reaches an item. The Claude Code fixture carries more: a key block that |
| 4 | # is split over two items, a key block with no END line, and an .env block. |
| 5 | # The values are obviously fake (FAKE, EXAMPLE, repeated letters) and exist |
| 6 | # only to be redacted. |
| 7 | # |
| 8 | # Each line is the exact fingerprint of a finding (file:rule:line). |
| 9 | internal/memory/testdata/roo/project/.roo/rules/general.md:stripe-access-token:4 |
| 10 | internal/memory/testdata/copilot/project/.github/copilot-instructions.md:jwt:5 |
| 11 | internal/memory/testdata/windsurf/home/.codeium/windsurf/memories/preferences.md:private-key:7 |
| 12 | internal/memory/testdata/claude-code/home/.claude/rules/sandbox.md:private-key:6 |
| 13 | # The shared redaction corpus (Memory M2a) holds fake secrets on purpose: each case proves the Go scrubber removes a |
| 14 | # shape. The values are obviously fake and exist only to be redacted; the same file is OpenVibe.SDK's test corpus. |
| 15 | internal/memory/testdata/redact-corpus.json:stripe-access-token:440 |
| 16 | internal/memory/testdata/redact-corpus.json:stripe-access-token:442 |
| 17 | internal/memory/testdata/redact-corpus.json:stripe-access-token:497 |
| 18 | internal/memory/testdata/redact-corpus.json:stripe-access-token:500 |
| 19 | internal/memory/testdata/redact-corpus.json:jwt:407 |
| 20 | internal/memory/testdata/redact-corpus.json:jwt:409 |
| 21 | internal/memory/testdata/redact-corpus.json:private-key:6 |
| 22 | internal/memory/testdata/redact-corpus.json:private-key:30 |
| 23 | internal/memory/testdata/redact-corpus.json:private-key:42 |
| 24 | internal/memory/testdata/redact-corpus.json:private-key:474 |
| 25 | |
| 26 | # The Connect status test lists a share by its port; the fake key it used to carry was removed, but the |
| 27 | # finding remains in this branch's first commit (a test literal, never a real key). |
| 28 | internal/connect/live_test.go:generic-api-key:43 |
| 29 |