openvibers/openvibe.tools Commits

gitleaks: allow the two hand-made sample JWTs (exp 1 / signature x, sub x / signature sig) in the JWT tool's descriptor example and engine test, matched on path and value

OP OpenVibers committed 23 Sept 2026 · 902b27ec51 · 1 file, +6 −0





Changes
ddiff --git a/.gitleaks.toml b/.gitleaks.toml
iindex ffa0335..75182ce 100644
---- a/.gitleaks.toml
++++ b/.gitleaks.toml
@@@ -9,3 +9,9 @@ description = "The public jwt.io sample token (sub 1234567890, iat 1516239022) p
  condition = "AND"
  paths = ['''^apps/gateway/public/dev\.html$''']
  regexes = ['''^eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9\.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkhvYm8iLCJpYXQiOjE1MTYyMzkwMjJ9\.''']
++
++[[allowlists]]
++description = "Hand-made sample JWTs ({\"alg\":\"HS256\"} with {\"exp\":1} and signature 'x', or {\"sub\":\"x\"} and signature 'sig') used as the JWT decoder's descriptor example and engine test input; they sign nothing"
++condition = "AND"
++paths = ['''^apps/gateway/(test/engines\.test\.js|server/dev/descriptors\.js)$''']
++regexes = ['''^eyJhbGciOiJIUzI1NiJ9\.(eyJleHAiOjF9\.x|eyJzdWIiOiJ4In0\.sig)$''']