# Gitleaks configuration for Crussell
title = "Crussell secrets scanning"

[extend]
# Use the default gitleaks rules
useDefault = true

# Allowlist paths and regexes that are known safe
[allowlist]
description = "Known false positives"
paths = [
    # Test fixtures with mock data
    "backend/testutils/",
    "backend/handlers/.*_test.go",
    # Example env file with placeholder values
    ".env.example",
    # SabreDAV dependency files
    "sabredav/composer.json",
    # Frontend env examples
    "frontend/.env.production",
    # Obsidian docs — contain API curl examples with Authorization headers
    "obsidian/",
]