.gitleaksignore

# Gitleaks ignore file
# Add patterns or commit hashes to ignore false positives
# Format: commit:file:line or just the secret fingerprint

# Example placeholder values in .env.example files are not secrets
# .env.example files use "placeholder" as values which is safe

# Test fixtures with fake credentials
# tooling/testkit/**

# Documentation examples
# docs/**

# False positives from imported upstream test fixtures in local subtree commits.
4f6b06621704b4f5b7f578f57914e6d9e7f4d376:packages/client/test/client/crossAppAccess.test.ts:generic-api-key:13
4f6b06621704b4f5b7f578f57914e6d9e7f4d376:packages/client/test/client/crossAppAccess.test.ts:generic-api-key:24
4f6b06621704b4f5b7f578f57914e6d9e7f4d376:packages/client/test/client/crossAppAccess.test.ts:generic-api-key:306
5a0d07a871d0eb345572b3784c4174da6c6542f5:codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs:generic-api-key:188
5a0d07a871d0eb345572b3784c4174da6c6542f5:codex-rs/cli/src/login.rs:generic-api-key:399
5a0d07a871d0eb345572b3784c4174da6c6542f5:codex-rs/cli/src/login.rs:generic-api-key:405

# False positives from upstream Effect subtree examples using documented placeholder tokens.
200a511d50cc49cdf97d069cbc1f5001922745fe:packages/effect/HTTPAPI.md:curl-auth-header:1039
200a511d50cc49cdf97d069cbc1f5001922745fe:packages/effect/src/Config.ts:generic-api-key:1156