.gitleaks.toml

main 1.0 KB · 24 lines · ini

1	# gitleaks configuration, used by the shared security workflow
2	# (OpenVibers/OpenVibe.Shared/.github/workflows/security.yml). The default rules stay on; every
3	# allowlist below is one proven false positive, matched on path AND value so nothing else is hidden.
4	[extend]
5	useDefault = true
6
7	[[allowlists]]
8	description = "A file object key (def456-b.png) in the objects-model test"
9	condition = "AND"
10	paths = ['''^test/objects-model\.test\.js$''']
11	regexes = ['''^def456-b\.png$''']
12
13	[[allowlists]]
14	description = "Throwaway app keys the local smoke test provisions for its own temporary server, and its deliberately wrong key"
15	condition = "AND"
16	paths = ['''^scripts/smoke-test\.sh$''']
17	regexes = ['''^(smoke-[a-z]+-key-[0-9]+\|wrong-key)$''']
18
19	[[allowlists]]
20	description = "Made-up INTERNAL_API_KEY in an older owner-subject test (test/owner-subject.test.js, removed with X-Internal-Key in 809b06b); the full-history scan still reads it. It opens nothing"
21	condition = "AND"
22	paths = ['''^test/owner-subject\.test\.js$''']
23	regexes = ['''^internal-key-0123456789abcdef$''']
24