From 4a5671d6d77d5289a9598241c335712223541d57 Mon Sep 17 00:00:00 2001
From: kayos <kayos@sulkta.com>
Date: Thu, 28 May 2026 12:21:33 -0700
Subject: [PATCH] ci: allowlist Localazy public readKey + tools/localazy/

---
 .gitleaks.toml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.gitleaks.toml b/.gitleaks.toml
index 1954dcfc4e..11864819e5 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -20,6 +20,8 @@ paths = [
     '''docs/.*''',
     '''.*/google-services\.json''',
     '''.*Test\.kt''',
+    '''localazy\.json''',
+    '''tools/localazy/.*''',
 ]
 regexTarget = "line"
 regexes = [
@@ -27,8 +29,10 @@ regexes = [
     '''[a-zA-Z]*[Aa]piKey\s*=\s*"phc_[A-Za-z0-9_-]{20,}"''',
     # MapTiler / similar public client keys named API_KEY constant
     '''const\s+val\s+API_KEY\s*=\s*"''',
-    # Segment write keys
+    # Segment write keys (Kotlin style)
     '''readKey\s*=\s*"''',
+    # Localazy / Segment readKey (JSON style)
+    '''"readKey"\s*:\s*"''',
     # Matrix protocol KDoc examples (* prefix is the KDoc comment shape)
     '''^\s*\*\s*"user_signing_key"\s*:\s*"''',
 ]