mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 12:32:43 +00:00
Marc-André Bombeck
9a390aacea
- MOOD_DIMENSIONS carries the five self-state dimensions in capture order, each with its column, its label and anchor keys, its orientation and its 0-10 bounds - getA1ForMood maps the five-point label onto the pleasantness scale once, so the quick check-in stays a full-value capture path - only stress is inverse-oriented, and a test pins that count - the secret scan reads a dotted message key on a *Key field as a token; allowlist the dimension keys the way the existing message keys are
41 lines
1.8 KiB
TOML
41 lines
1.8 KiB
TOML
# Gitleaks configuration. Extends the built-in default ruleset and adds
|
|
# a project-specific allowlist for false-positives that gitleaks 8.x flags
|
|
# as "generic-api-key" inside test fixtures.
|
|
[extend]
|
|
useDefault = true
|
|
|
|
[allowlist]
|
|
description = "Project-wide ignores for test fixtures and known non-secret tokens"
|
|
|
|
paths = [
|
|
# All test files contain hardcoded fake tokens / idempotency-keys.
|
|
'''(^|/)__tests__/''',
|
|
'''\.test\.ts$''',
|
|
# OpenAPI spec contains example tokens (`hlk_example…`) used to document the schema.
|
|
'''^docs/api/openapi\.yaml$''',
|
|
]
|
|
|
|
# Substring matches — anything matching is treated as non-secret regardless of file.
|
|
regexes = [
|
|
# Idempotency-Key request-header values are random UUIDs / opaque strings,
|
|
# not secrets. The header name itself just trips the generic-api-key rule.
|
|
'''idempotency-key''',
|
|
# Allow the placeholder prefix used in OpenAPI examples + docs.
|
|
'''hlk_example''',
|
|
# i18n caption keys for the briefing-driven trend charts are dotted message
|
|
# keys, not secrets — one trips the generic-api-key entropy heuristic.
|
|
'''insights\.trendsRow\.caption''',
|
|
# Coach cadence-suggestion label keys are dotted message keys, not secrets;
|
|
# one trips the generic-api-key entropy heuristic.
|
|
'''coach\.reminderSuggestion\.cadence''',
|
|
# Level-A mood dimension label and anchor keys are dotted message keys, not
|
|
# secrets; they sit on fields named `labelKey` / `lowAnchorKey`, and the
|
|
# generic-api-key rule reads any `*Key: "<high-entropy string>"` as a token.
|
|
'''mood\.dimension\.''',
|
|
]
|
|
|
|
# Specific commit fingerprints from prior false-positive findings (kept for reproducibility).
|
|
# Empty by default; populate via `gitleaks detect --report-path` if a future regression
|
|
# triggers the same false-positive on a stable commit hash.
|
|
stopwords = []
|