title = "gitleaks config"

[extend]
# Extends the default ruleset built into gitleaks.
# Remove useDefault and define [[rules]] from scratch if you want full control.
useDefault = true

# Rules to disable from the default set — uncomment and add IDs for known false positives.
# Run `gitleaks git -v` on your repo first to discover which rules fire.
# disabledRules = ["generic-api-key"]

# Global allowlist — applies to all rules.
# Note: uses [allowlist] (v8 syntax). v8.25.0+ uses [[allowlists]] (array of tables).
# Add path regexes or stopwords to suppress known false positives.
#
# Example: ignore test fixtures
# [allowlist]
# description = "test fixtures"
# paths = ['''tests/fixtures/.*''']
#
# Example: ignore a known false-positive secret value
# [allowlist]
# description = "placeholder values in docs"
# stopwords = ["example", "placeholder", "changeme"]