openvibers/openvibe.run .gitleaks.toml
.gitleaks.toml
| 1 | # gitleaks configuration, used by the shared security workflow |
| 2 | # (OpenVibers/OpenVibe.Shared/.github/workflows/security.yml). The default rules stay on; every |
| 3 | # allowlist below is one proven false positive, matched on path AND value so nothing else is hidden. |
| 4 | # |
| 5 | # Run stores no credential of its own: a stream ticket is signed at request time with the key at |
| 6 | # RUN_STREAM_PRIVATE_KEY / RUN_STREAM_KEY_FILE (.env.example carries names only) and is never written |
| 7 | # to disk or to a log. Nothing here needs an allowlist yet. |
| 8 | [extend] |
| 9 | useDefault = true |
| 10 |