openvibers/openvibe.shared .gitleaks.toml
.gitleaks.toml
| 1 | # gitleaks configuration, used by the shared security workflow (.github/workflows/security.yml). |
| 2 | # The default rules stay on; every allowlist below is one proven false positive, matched on path AND |
| 3 | # value so nothing else is hidden. |
| 4 | [extend] |
| 5 | useDefault = true |
| 6 | |
| 7 | [[allowlists]] |
| 8 | description = "Made-up secrets in the configuration model's tests (test/config.test.js and its PostgreSQL twin test/config-pg.test.js): they exist to prove secrets are redacted, never logged and never served" |
| 9 | condition = "AND" |
| 10 | paths = ['''^test/config(-pg)?\.test\.js$'''] |
| 11 | regexes = ['''^(sk_live_TOPSECRET_9f8e7d6c5b4a|re_abcdef123456)$'''] |
| 12 |