.gitleaks.toml

main 972 B · 18 lines · ini

1	# gitleaks configuration, used by the shared security workflow
2	# (OpenVibers/OpenVibe.Shared/.github/workflows/security.yml). The default rules stay on; every
3	# allowlist below is one proven false positive, matched on path AND value so nothing else is hidden.
4	[extend]
5	useDefault = true
6
7	[[allowlists]]
8	description = "The test vectors' wrapped content keys and the recipient key thumbprint: made-up base64 in the file that exists to be checked"
9	condition = "AND"
10	paths = ['''^src/locker/vectors\.js$''']
11	regexes = ['''^(IpXVDIbStzw/kky7eKnrPQ7SOufRZ8zjU8iWB3c59OhfRjKLXuwDs4NQ4OlMAtGN\|t9FBCQEiSb87EYFaqq9yjm45qITqW8p8qMoz49vKUhbbUznoz9T0iwJXSmBBaTLN\|pnLvXu5bTR3lmWGT2GFfWc2v43dG67dM7lrStqWOPrL4f\+SI6YivVWwXK0BvVjiR\|TCGh2gH6HIuT0-A9Ge0jOTrFmRXWQkdA6fZG8JxikTA)$''']
12
13	[[allowlists]]
14	description = "The name of the password key derivation, in a test that reads it from the header"
15	condition = "AND"
16	paths = ['''^test/locker\.test\.js$''']
17	regexes = ['''^PBKDF2-SHA-256$''']
18