From 44e2c4f47ddf7e112afe2467018237a309d50a7e Mon Sep 17 00:00:00 2001 From: Ayla Croft Date: Wed, 7 Oct 2026 07:18:42 -0400 Subject: [PATCH] chore(ci): let gitleaks pass the proof route's public test nonce PR #31's extension test uses the nonce from the proof route's documented test vector, which gitleaks reads as a generic API key. Since #28, a pull request can't allowlist its own findings, so the entry lands on main first, as that change intends. Co-Authored-By: Claude Opus 5.5 Signed-off-by: Ayla Croft --- .gitleaksignore | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.gitleaksignore b/.gitleaksignore index 311f505..b6d41d9 100644 --- a/.gitleaksignore +++ b/.gitleaksignore @@ -7,3 +7,7 @@ # A fake Whisper key in a test, written before it followed that rule; renamed since. bd016da4200b0d28093d8360304e46d844ef8f23:server/test/kotiko/voice_test.exs:generic-api-key:75 + +# The public test vector's nonce for POST /api/v1/proof (docs/reference/http-api.md), not a +# secret: an extension test uses it as "a proof for another nonce" (security review B-01). +cc15012ce7f04770df6d6109165c2ebc96c5557c:test/bg/background.test.mjs:generic-api-key:1122