.gitleaks.toml

main 1.0 KB · 18 lines · ini

1	# gitleaks configuration, used by the shared security workflow
2	# (OpenVibers/OpenVibe.Shared/.github/workflows/security.yml). The default rules stay on; every
3	# allowlist below is one proven false positive, matched on path AND value so nothing else is hidden.
4	[extend]
5	useDefault = true
6
7	[[allowlists]]
8	description = "The public jwt.io sample token (sub 1234567890, iat 1516239022) prefilled in the JWT decoder demo"
9	condition = "AND"
10	paths = ['''^apps/gateway/public/dev\.html$''']
11	regexes = ['''^eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9\.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkhvYm8iLCJpYXQiOjE1MTYyMzkwMjJ9\.''']
12
13	[[allowlists]]
14	description = "Hand-made sample JWTs ({\"alg\":\"HS256\"} with {\"exp\":1} and signature 'x', or {\"sub\":\"x\"} and signature 'sig') used as the JWT decoder's descriptor example and engine test input; they sign nothing"
15	condition = "AND"
16	paths = ['''^apps/gateway/(test/engines\.test\.js\|server/dev/descriptors\.js)$''']
17	regexes = ['''^eyJhbGciOiJIUzI1NiJ9\.(eyJleHAiOjF9\.x\|eyJzdWIiOiJ4In0\.sig)$''']
18