From 54d3ee4856dcc993a22f21d4f687b1f55cb8e7d6 Mon Sep 17 00:00:00 2001 From: Strycher Date: Sat, 13 Jun 2026 02:52:22 -0400 Subject: [PATCH] chore(#16): add .gitleaksignore for known benign findings Allowlist the 6 gitleaks findings (all upstream/already-public: 5 generic-api-key false positives in app_pl.arb, 1 Giphy public beta key in gif_picker.dart, since replaced by --dart-define). gitleaks now reports 0. See #13 for the scan. Co-Authored-By: Claude Opus 4.8 --- .gitleaksignore | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 .gitleaksignore diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..1adc0b5 --- /dev/null +++ b/.gitleaksignore @@ -0,0 +1,9 @@ +# Known benign gitleaks findings (see #16, #13) — all in upstream commits, already public. +# 5x generic-api-key FALSE POSITIVES in lib/l10n/app_pl.arb (Polish translation strings). +# 1x Giphy public beta/demo key in gif_picker.dart (replaced by --dart-define injection, #15). +7eff1df6e21c8e24c0738c07ccbc8b4c47babc09:lib/l10n/app_pl.arb:generic-api-key:1146 +53cd3f4461a179269e043c71df31dd67a6606cb8:lib/l10n/app_pl.arb:generic-api-key:1136 +38d40ca0a46036becf113ab089e6bb9ce48ccbf8:lib/l10n/app_pl.arb:generic-api-key:1135 +44c0670dae1845e67604a1658e2df094fa565e9c:lib/l10n/app_pl.arb:generic-api-key:1135 +b2ce82fe7ee72d736f0a457cc3dc79bf2a027fdb:lib/l10n/app_pl.arb:generic-api-key:1117 +e7a5b9e20938977bc8d93b870e044098ab4ab2c6:lib/widgets/gif_picker.dart:generic-api-key:26