From b2d129b6f2b34e36ed0bf9107bbfff02d579d56e Mon Sep 17 00:00:00 2001 From: darthrootbeer Date: Mon, 26 Oct 2026 15:56:06 -0400 Subject: [PATCH] fix(ci): allow the skills survey storage label in the secret scan Co-Authored-By: Claude Sonnet 5.5 Claude-Session: https://claude.ai/code/session_01Bihc4e3Pg6Ago5K1xfMbe5 --- .gitleaks.toml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/.gitleaks.toml b/.gitleaks.toml index 9002d0d..3873bb4 100644 --- a/.gitleaks.toml +++ b/.gitleaks.toml @@ -1,5 +1,7 @@ -# Extends the default gitleaks rules and allows one thing only: the fake -# placeholder YOUR_API_KEY used in a sample curl command. It is not a credential. +# Extends the default gitleaks rules and allows two things only: the fake +# placeholder YOUR_API_KEY used in a sample curl command, and the browser +# storage label ja-skills-survey-v1 in an earlier version of the skills survey +# page. Neither is a credential. # Matching on the placeholder text (not a commit hash) keeps it working # after squash merges, which create new commit hashes. title = "context-engineering-toolkit" @@ -8,5 +10,5 @@ title = "context-engineering-toolkit" useDefault = true [allowlist] -description = "Placeholder API key in documentation examples" -regexes = ['''YOUR_API_KEY'''] +description = "Placeholder API key in documentation examples, and a browser storage label" +regexes = ['''YOUR_API_KEY''', '''ja-skills-survey-v1''']