title = "gitleaks config for code.tnxs.net/vernonkeenan/lib" [extend] useDefault = true # ADR-KV-014: first-ever CI gitleaks scan surfaced 6 findings, all in # swagger-codegen-generated Kazoo API client models and the vendored # Kazoo swagger spec. Each is an illustrative `// Example:` / `example:` # JWT hardcoded by the generator to document the shape of an auth_token # field — a placeholder from the vendor's public API docs, not a # credential issued to or used by this project. Scoped narrowly to the # four generated files that triggered, not repo-wide. [allowlist] description = "Generated Kazoo API client/swagger example JWTs (not real secrets)" paths = [ '''api/kazoo/kazoo_models/get_account_descendent_response\.go''', '''api/kazoo/kazoo_models/get_account_callflow_response\.go''', '''api/kazoo/kazoo_models/get_account_response\.go''', '''swagger/kazoo-telnexus\.yaml''', ]