luckberg/familysync
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(16-04): allowlist crypto.test.ts synthetic AES test key in gitleaks config

Browse Source 
- Add 4th [[allowlists]] block for apps/api/tests/broker/crypto.test.ts
- Human-verified: TEST_KEY in Vitest beforeAll is a synthetic AES-256-GCM fixture, not a real credential
- Original 3 allowlists (VAPID fixture, .env.example, .env.spike) intact
This commit is contained in:
Lucas Berger
2026-06-13 08:14:26 -04:00
parent 5819247a01
commit fba22b445b
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitleaks.toml
+4
View File
@@ -18,3 +18,7 @@ paths = ['''\.env\.example$''']
[[allowlists]] [[allowlists]]
description = "apps/api/.env.spike — dev/spike values, not production secrets" description = "apps/api/.env.spike — dev/spike values, not production secrets"
paths = ['''apps/api/\.env\.spike$'''] paths = ['''apps/api/\.env\.spike$''']
[[allowlists]]
description = "apps/api/tests/broker/crypto.test.ts — synthetic AES-256-GCM test key assigned to process.env.APP_PASSWORD_ENCRYPTION_KEY in a Vitest beforeAll; not a real credential"
paths = ['''apps/api/tests/broker/crypto\.test\.ts''']