From d951334c3bc5c2d97c02c3845a62dd901f52e966 Mon Sep 17 00:00:00 2001 From: Carles Garcia Cabot Date: Mon, 14 Sep 2026 16:47:53 +0200 Subject: [PATCH] chore: exclude synthetic conformance fixtures from secret scanning Add exact-path exclusions for the synthetic legacy corpus and the audit test containing a never-submitted GitLab registration token. These files were still blocked after the catalog exclusion; keep all other conformance files and production code covered. --- .github/secret_scanning.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/secret_scanning.yml b/.github/secret_scanning.yml index 2e5f2a01a48..b4f63bc7e72 100644 --- a/.github/secret_scanning.yml +++ b/.github/secret_scanning.yml @@ -3,3 +3,7 @@ # Keep production code and all other paths covered by secret scanning. paths-ignore: - "pkg/secrets/testdata/catalog/*.json" + # Conformance corpus explicitly marked scope: synthetic. + - "tools/secrets-conformance/testdata/legacy.json" + # Audit test includes a synthetic GitLab registration token that is never submitted. + - "tools/secrets-conformance/synthetic_audit_test.go"