lib/.gitleaks.toml

21 lines
902 B
TOML

title = "gitleaks config for code.tnxs.net/vernonkeenan/lib"
[extend]
useDefault = true
# ADR-KV-014: first-ever CI gitleaks scan surfaced 6 findings, all in
# swagger-codegen-generated Kazoo API client models and the vendored
# Kazoo swagger spec. Each is an illustrative `// Example:` / `example:`
# JWT hardcoded by the generator to document the shape of an auth_token
# field — a placeholder from the vendor's public API docs, not a
# credential issued to or used by this project. Scoped narrowly to the
# four generated files that triggered, not repo-wide.
[allowlist]
description = "Generated Kazoo API client/swagger example JWTs (not real secrets)"
paths = [
'''api/kazoo/kazoo_models/get_account_descendent_response\.go''',
'''api/kazoo/kazoo_models/get_account_callflow_response\.go''',
'''api/kazoo/kazoo_models/get_account_response\.go''',
'''swagger/kazoo-telnexus\.yaml''',
]