TehRiehlDeal/movieloop-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): allowlist README.md in gitleaks config
backend-ci / sast (push) Successful in 6s
Details
backend-ci / fs-scan (push) Failing after 4s
Details
backend-ci / lint (push) Successful in 23s
Details
backend-ci / typecheck (push) Successful in 20s
Details
backend-ci / test (push) Successful in 21s
Details
backend-ci / secrets-scan (push) Successful in 4s
Details
backend-ci / image-scan (push) Has been cancelled
Details
backend-ci / push (push) Has been cancelled
Details
backend-ci / build (push) Has been cancelled
Details

Browse Source 
The NestJS starter README includes a placeholder CircleCI badge token
(?token=abc123def456) on a reference-style image link. README files
commonly contain placeholder secrets and badge URLs, so allowlist
README.md by path. Same pattern as the existing .env.example allowlist.

Verified locally: gitleaks scan now reports no leaks.
This commit is contained in:
Kevin Riehl
2026-05-08 18:00:14 -07:00
parent a610c633de
commit 0ae10599f4
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitleaks.toml
+3 -1
View File
@@ -1,9 +1,11 @@
# Gitleaks config for the movieloop backend repo.
# Inherits the default rule set; allows .env.example by path.
# Inherits the default rule set; allows .env.example and README.md
# by path (READMEs commonly include placeholder/badge URL tokens).
[extend]
useDefault = true
[allowlist]
paths = [
'''(^|/)\.env\.example$''',
'''(^|/)README\.md$''',
]