Phase 16: CI dependency audit & security checks #15
@@ -18,3 +18,7 @@ paths = ['''\.env\.example$''']
|
|||||||
[[allowlists]]
|
[[allowlists]]
|
||||||
description = "apps/api/.env.spike — dev/spike values, not production secrets"
|
description = "apps/api/.env.spike — dev/spike values, not production secrets"
|
||||||
paths = ['''apps/api/\.env\.spike$''']
|
paths = ['''apps/api/\.env\.spike$''']
|
||||||
|
|
||||||
|
[[allowlists]]
|
||||||
|
description = "apps/api/tests/broker/crypto.test.ts — synthetic AES-256-GCM test key assigned to process.env.APP_PASSWORD_ENCRYPTION_KEY in a Vitest beforeAll; not a real credential"
|
||||||
|
paths = ['''apps/api/tests/broker/crypto\.test\.ts''']
|
||||||
|
|||||||
Reference in New Issue
Block a user