From d45e97a98812825b9b94c8b6a5ae8e8f08157022 Mon Sep 17 00:00:00 2001
From: Sulkta <oss@sulkta.com>
Date: Sun, 28 Jun 2026 22:28:52 -0700
Subject: [PATCH] chore: add gitleaks allowlist for upstream public test
 fixtures (not secrets)

---
 .gitleaks.toml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 .gitleaks.toml

diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000..4c3e487
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,19 @@
+# Sulkta gitleaks allowlist for this repo (a fork of ThetaDev/rustypipe).
+# These paths hold UPSTREAM YouTube API response fixtures, insta snapshot tests,
+# and the InnerTube client (which embeds the PUBLIC Google/NewPipe TV OAuth
+# secret present in every public clone). High-entropy IDs/tokens in this test
+# data false-positive as API keys. NOT Sulkta secrets.
+[extend]
+useDefault = true
+
+[allowlist]
+description = "Upstream rustypipe YouTube fixtures + InnerTube client (public, not secrets)"
+paths = [
+  '''testfiles/''',
+  '''snapshots/''',
+  '''notes/''',
+  '''codegen/''',
+  '''src/client/mod\.rs$''',
+  '''src/client2/mod\.rs$''',
+  '''gen_locales\.rs$''',
+]