nosilha/.gitleaksignore at main · deznode/nosilha · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# Gitleaks Ignore File
# https://github.com/gitleaks/gitleaks#gitleaksignore

# ============================================================
# FALSE POSITIVES - Intentional test/documentation values
# ============================================================

# Documentation placeholder "YOUR_JWT" / "YOUR_JWT_HERE" in admin roles docs
0b09c5c6bcee1bdcd320578721fc8f19fa015360:docs/SUPABASE_ADMIN_ROLES.md:curl-auth-header:300
fd66656ee4fd5c21cc1118ba19e4cc8139d0974f:docs/SUPABASE_ADMIN_ROLES.md:curl-auth-header:300
535e37af7746587994dfa934fff0b89b4fed610d:docs/supabase-admin-roles.md:curl-auth-header:84
e30dce26825a9f062285f67221c0a1bc66bffb56:docs/supabase-admin-roles.md:curl-auth-header:84

# Truncated JWT examples in API documentation "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
# Intentionally incomplete examples showing JWT format
2d051852e45aa3ce189720caa4e4999681741cba:docs/API_REFERENCE.md:curl-auth-header:659
2d051852e45aa3ce189720caa4e4999681741cba:docs/API_REFERENCE.md:curl-auth-header:675
af90ccf2a35826de223c15de70672a97d4ed0d9b:docs/API_REFERENCE.md:curl-auth-header:719
af90ccf2a35826de223c15de70672a97d4ed0d9b:docs/API_REFERENCE.md:curl-auth-header:737

# Intentional test secret "test-secret-key-that-is-at-least-32-characters-long"
# Used in test configurations and CI workflows - not a real secret
4da45ab29177586a0714e5eac2819bf46b4dfdf4:backend/src/test/kotlin/com/nosilha/core/config/TestSecurityConfig.kt:generic-api-key:104
3e83993e27fc458e6f8daf9b950dd97bfd9ad880:backend/src/test/kotlin/com/nosilha/core/config/TestSecurityConfig.kt:generic-api-key:103
af90ccf2a35826de223c15de70672a97d4ed0d9b:backend/src/test/resources/application-test.yml:generic-api-key:50
0d3a79c617a16f458040fb029f30614967f7d54a:backend/src/test/resources/application-test.yml:generic-api-key:47
a79724502444128f9091c81ab6c011ce29a53e03:backend/src/test/resources/application-test.yml:generic-api-key:47
af90ccf2a35826de223c15de70672a97d4ed0d9b:.github/workflows/integration-testing.yml:generic-api-key:105
af90ccf2a35826de223c15de70672a97d4ed0d9b:.github/workflows/integration-testing.yml:generic-api-key:258
af90ccf2a35826de223c15de70672a97d4ed0d9b:.github/workflows/integration-testing.yml:generic-api-key:387
af90ccf2a35826de223c15de70672a97d4ed0d9b:.github/workflows/integration-testing.yml:generic-api-key:491
959d7e02faa37ce710a6324140e656944722cd75:.github/workflows/integration-testing.yml:generic-api-key:105
959d7e02faa37ce710a6324140e656944722cd75:.github/workflows/integration-testing.yml:generic-api-key:258
959d7e02faa37ce710a6324140e656944722cd75:.github/workflows/integration-testing.yml:generic-api-key:387
959d7e02faa37ce710a6324140e656944722cd75:.github/workflows/integration-testing.yml:generic-api-key:491

# Local development default SUPABASE_JWT_SECRET in docker .env.example
# This is not a production secret - it's a well-known local dev default
4da45ab29177586a0714e5eac2819bf46b4dfdf4:infrastructure/docker/.env.example:generic-api-key:18
d377db043b4225b6c7daf180355a7069feea3354:infrastructure/docker/.env.example:generic-api-key:18

# ============================================================
# SOPS Encrypted Files
# ============================================================
# Secrets in .enc.yaml files are encrypted with SOPS + age
# Only the encrypted YAML is committed, not plaintext
# These are safe to commit since they're encrypted
apps/api/.env.local.enc.yaml:gcp-api-key:18
apps/api/.env.local.enc.yaml:gcp-api-key:35
apps/api/.env.local.enc.yaml:generic-api-key:9
apps/api/.env.local.enc.yaml:generic-api-key:29
apps/web/.env.local.enc.yaml:generic-api-key:17
apps/web/.env.local.enc.yaml:generic-api-key:20
apps/web/.env.local.enc.yaml:generic-api-key:35
apps/web/.env.local.enc.yaml:generic-api-key:57
apps/web/.env.local.enc.yaml:github-fine-grained-pat:49