From 983599ea34c40dff55980b202457f59dd5d5d06d Mon Sep 17 00:00:00 2001 From: Sulkta Date: Sun, 28 Jun 2026 22:42:29 -0700 Subject: [PATCH] chore: add gitleaks allowlist for upstream public client config (not secrets) --- .gitleaks.toml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 .gitleaks.toml diff --git a/.gitleaks.toml b/.gitleaks.toml new file mode 100644 index 0000000000..7d67302919 --- /dev/null +++ b/.gitleaks.toml @@ -0,0 +1,19 @@ +# Sulkta gitleaks allowlist for this repo (a fork of vector-im/element-x-android). +# These paths hold UPSTREAM Element X public client configuration — Firebase +# google-services.json (client API keys, public-by-design, restricted by app +# signing), PostHog / MapTiler / Localazy client keys, and login default +# endpoints — all present in the upstream public repo. NOT Sulkta secrets. +[extend] +useDefault = true + +[allowlist] +description = "Upstream Element X public client config (not secrets)" +paths = [ + '''google-services\.json$''', + '''localazy\.json$''', + '''tools/localazy/''', + '''features/location/''', + '''docs/maps\.md$''', + '''ElementClassicConnection\.kt$''', + '''services/analyticsproviders/posthog/''', +]