openvibers/openvibe.services .gitleaks.toml
.gitleaks.toml
| 1 | # gitleaks configuration, used by the shared security workflow |
| 2 | # (OpenVibers/OpenVibe.Shared/.github/workflows/security.yml). The default rules stay on; every |
| 3 | # allowlist below is one proven false positive, matched on path AND value so nothing else is hidden. |
| 4 | # |
| 5 | # Services stores no credential of its own: the authority tokens are Network client-credentials tokens |
| 6 | # minted at call time from OV_OAUTH_CLIENT_ID / OV_OAUTH_CLIENT_SECRET (.env.example carries names only) |
| 7 | # and never written to disk, a log line or a response body. Nothing here needs an allowlist yet. |
| 8 | [extend] |
| 9 | useDefault = true |
| 10 |