openvibers/openvibe.live Commits

gitleaks: allow RFC 6455's sample Sec-WebSocket-Key ('the sample nonce') in test/drill-mode.test.js, matched on path and value; the generic-api-key rule took it for a key

OP OpenVibers committed 23 Sept 2026 · 2767603d62 · 1 file, +6 −0





Changes
ddiff --git a/.github/gitleaks.toml b/.github/gitleaks.toml
iindex b808f257..48e662f6 100644
---- a/.github/gitleaks.toml
++++ b/.github/gitleaks.toml
@@@ -15,3 +15,9 @@ description = "Stream key committed in the initial release's hardware-bridge exa
  condition = "AND"
  paths = ['''^control-bridge-example-cozmo\.py$''']
  commits = ["ac0d6a47f8d4e7f86bb2a9323bd7d3047da9c821"]
++
++[[allowlists]]
++description = "RFC 6455's sample Sec-WebSocket-Key (base64 of 'the sample nonce') in the drill-mode test's upgrade request; not a secret"
++condition = "AND"
++paths = ['''^test/drill-mode\.test\.js$''']
++regexes = ['''^dGhlIHNhbXBsZSBub25jZQ==$''']