ilia/punimtag
1
1
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

ci: fix gitleaks no-op ruleset (add useDefault = true)
Some checks failed
CI / skip-ci-check (pull_request) Successful in 10s
Details
CI / docker-ci (pull_request) Successful in 12s
Details
CI / secret-scan (pull_request) Failing after 24s
Details

Browse Source
This commit is contained in:
ilia 2026-07-12 18:15:35 -05:00
parent f8bc0cd638
commit 41d953638e
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
.gitleaks.toml
View File

@ -1,6 +1,15 @@
# Homelab bootstrap — gitleaks allowlist (tests, examples, placeholders)
#
# IMPORTANT: `useDefault = true` is required — without it gitleaks loads ONLY
# this file (title + allowlist) with ZERO detection rules, so it would never
# flag a real secret. Fixed 2026-07 (security-hardening track); if you're
# re-pushing this template to a repo that already had the old version, that
# repo's secret scanning was a no-op until this lands.
title = "homelab gitea bootstrap"
[extend]
useDefault = true
[allowlist]
description = "Test fixtures and example configs are not production secrets"
paths = [