Files
playbooks/.gitleaks.toml
T
tanshu 2aab1aec1e Add secret scanning, layout checks, and a --changed mode
gitleaks runs before each commit and in CI, with known values in a redacted baseline. The layout check rejects empty readmes and main.yml role entrypoints. --changed lints only the YAML files that differ from HEAD.
2026-10-18 21:53:29 +05:30

11 lines
196 B
TOML

[extend]
useDefault = true
[allowlist]
description = "Caches and vendored collections are not repo content"
paths = [
'''\.ansible/''',
'''\.scratch/''',
'''\.gitleaks-baseline\.json''',
]