gitleaks runs before each commit and in CI, with known values in a redacted baseline. The layout check rejects empty readmes and main.yml role entrypoints. --changed lints only the YAML files that differ from HEAD.
11 lines
196 B
TOML
11 lines
196 B
TOML
[extend]
|
|
useDefault = true
|
|
|
|
[allowlist]
|
|
description = "Caches and vendored collections are not repo content"
|
|
paths = [
|
|
'''\.ansible/''',
|
|
'''\.scratch/''',
|
|
'''\.gitleaks-baseline\.json''',
|
|
]
|