ci: add local pre-commit gitleaks hook #5

Merged
ilia merged 4 commits from ci/bootstrap-pre-commit-gitleaks-hook into main 2026-07-13 15:00:18 -05:00
Showing only changes of commit 0017de6fec - Show all commits

View File

@ -1,6 +1,15 @@
# Homelab bootstrap — gitleaks allowlist (tests, examples, placeholders) # Homelab bootstrap — gitleaks allowlist (tests, examples, placeholders)
#
# IMPORTANT: `useDefault = true` is required — without it gitleaks loads ONLY
# this file (title + allowlist) with ZERO detection rules, so it would never
# flag a real secret. Fixed 2026-07 (security-hardening track); if you're
# re-pushing this template to a repo that already had the old version, that
# repo's secret scanning was a no-op until this lands.
title = "homelab gitea bootstrap" title = "homelab gitea bootstrap"
[extend]
useDefault = true
[allowlist] [allowlist]
description = "Test fixtures and example configs are not production secrets" description = "Test fixtures and example configs are not production secrets"
paths = [ paths = [