title = "gitleaks config"

[extend]
# Extends the default ruleset built into gitleaks.
# Remove useDefault and define [[rules]] from scratch if you want full control.
useDefault = true

# Rules to disable from the default set — uncomment and add IDs for known false positives.
# Run `gitleaks git -v` on your repo first to discover which rules fire.
# disabledRules = ["generic-api-key"]

# Global allowlist — applies to all rules.
# Note: uses [allowlist] (v8 syntax). v8.25.0+ uses [[allowlists]] (array of tables).
# Add path regexes or stopwords to suppress known false positives.

[allowlist]
description = "Known false positives — prose patterns and research session notes"
# docs/research/: high-entropy text from terminal captures in session notes
# docs/ROADMAP.md: documents known false positives, triggering the same rules
# ai-coding-factory-session.md:90 specifically: 'Token routing: Haiku/Sonnet/Opus'
paths = [
  '''docs/research/.*''',
  '''docs/ROADMAP\.md''',
]