openvibers/openvibe.live Commits

finish-f2: Changed: Added narrow, file-scoped allowances for the…

OP OpenVibers committed 1 Oct 2026 · 3fd8665f38 · 1 file, +18 −0

Handed to the local harness by the cloud job pr-OpenVibe.Live-3; done by Codex GPT-6 Sol.

Changes

ddiff --git a/.gitleaks.toml b/.gitleaks.toml
iindex 65df6369..27d68577 100644
---- a/.gitleaks.toml
++++ b/.gitleaks.toml
@@@ -9,3 +9,21 @@ description = "A made-up Stripe secret in the site-config test that proves a sec
condition = "AND"
paths = ['''^test/site-config\.test\.js$''']
regexes = ['''^sk_live_[a-z]{10}$''']
++
++[[allowlists]]
++description = "Placeholder JWT and API tokens in the API documentation"
++condition = "AND"
++paths = ['''^docs/api-tokens\.md$''']
++regexes = ['''^YOUR_JWT$''', '''^hbt_YOUR_TOKEN_HERE$''', '''^hbt_a1b2c3d4e5f6\.\.\.$''']
++
++[[allowlists]]
++description = "Stream key in the initial Cozmo bridge example, rotated on 2026-09-23; the current file has a placeholder"
++condition = "AND"
++paths = ['''^control-bridge-example-cozmo\.py$''']
++commits = ["ac0d6a47f8d4e7f86bb2a9323bd7d3047da9c821"]
++
++[[allowlists]]
++description = "RFC 6455 sample WebSocket key in the drill-mode test"
++condition = "AND"
++paths = ['''^test/drill-mode\.test\.js$''']
++regexes = ['''^dGhlIHNhbXBsZSBub25jZQ==$''']