title = "nick-doc gitleaks config"

[extend]
useDefault = true

# 'Pangolin/Newt' is the literal product name of a self-hosted tunneling tool
# mentioned in operational handoff docs, not a secret. The generic-api-key
# rule fires on entropy heuristics for the surrounding line.
[[allowlists]]
description = "Documentation-only false positives"
regexes = [
  '''Pangolin/Newt''',
]

# Pin the known historical finding so we don't mask future leaks in the file.
[[allowlists]]
description = "Pre-existing FP in Telegram Mini App handoff doc, 2026-05-24"
commits = ["940ad0c655777e3bf6d5416fd2829be77bdfc4f8"]
