title = "Gitleaks configuration for wpcom-themes"

[extend]
useDefault = true

# linkedin-client-secret false-match on i18n call shape
# esc_html_e( 'LinkedIn', '<textdomain>' ); not a secret.
[[allowlists]]
description = "linkedin-client-secret i18n shape in pattern"
targetRules = ["linkedin-client-secret"]
paths = [
  '''^twentytwentyfive/patterns/page-cv-bio\.php$''',
]

# generic-api-key matches className:"..." etc. in a minified Gutenberg
# block-editor bundle (built artifact), not a credential.
[[allowlists]]
description = "generic-api-key minified bundle noise"
targetRules = ["generic-api-key"]
paths = [
  '''^videopress-hq/assets/isolated-block-editor-.*\.js$''',
]