title = "gitleaks config"

[extend]
# Extends the default ruleset built into gitleaks.
# Remove useDefault and define [[rules]] from scratch if you want full control.
useDefault = true

# Rules to disable from the default set — uncomment and add IDs for known false positives.
# Run `gitleaks git -v` on your repo first to discover which rules fire.
# disabledRules = ["generic-api-key"]

# Project-specific allowlists — entries here apply to all rules.
# Add fingerprints from .gitleaksignore, or path/regex patterns to suppress noise.
#
# Example: ignore test fixtures
# [[allowlists]]
# description = "test fixtures"
# paths = ['''tests/fixtures/.*''']
#
# Example: ignore a known false-positive secret value
# [[allowlists]]
# description = "placeholder values used in docs"
# stopwords = ["example", "placeholder", "changeme"]

[allowlist]
description = "Known false positives — prose patterns and research session notes"
# docs/research/: high-entropy text from terminal captures in session notes
# docs/ROADMAP.md: documents known false positives, triggering the same rules
# ai-coding-factory-session.md:90 specifically: 'Token routing: Haiku/Sonnet/Opus'
paths = [
  '''docs/research/.*''',
  '''docs/ROADMAP\.md''',
]