title = "gitleaks config"

[extend]
# Extends the default ruleset built into gitleaks.
# Remove useDefault and define [[rules]] from scratch if you want full control.
useDefault = true

# Rules to disable from the default set — uncomment and add IDs for known false positives.
# Run `gitleaks git -v` on your repo first to discover which rules fire.
# disabledRules = ["generic-api-key"]

# Project-specific allowlists — entries here apply to all rules.
# Add fingerprints from .gitleaksignore, or path/regex patterns to suppress noise.
#
# Example: ignore test fixtures
# [[allowlists]]
# description = "test fixtures"
# paths = ['''tests/fixtures/.*''']
#
# Example: ignore a known false-positive secret value
# [[allowlists]]
# description = "placeholder values used in docs"
# stopwords = ["example", "placeholder", "changeme"]

[allowlist]
description = "research session notes — no secrets, high-entropy text from terminal captures"
paths = ['''docs/research/.*''']