chore: unblock push by tuning gitleaks + report path

This commit is contained in:
Haitao Pan 2026-02-06 13:24:49 +08:00
parent 33bd1b8beb
commit 51358586e1
3 changed files with 6 additions and 1 deletions

3
.gitignore vendored
View File

@ -63,3 +63,6 @@ target/
xcontrol-account
account-export.yaml
accountsvc
# Security tooling reports
.gitleaks/

View File

@ -20,6 +20,7 @@ stopwords = [
"example",
"placeholder",
"test-password",
"SecurePassword123",
]
[[rules]]

View File

@ -6,7 +6,8 @@
MODE=${1:-staged}
GITLEAKS_BIN=${GITLEAKS_BIN:-gitleaks}
GITLEAKS_CONFIG=${GITLEAKS_CONFIG:-config/gitleaks.toml}
GITLEAKS_REPORT_DIR=${GITLEAKS_REPORT_DIR:-.git/gitleaks}
# Default to /tmp (some environments forbid writing under the repo or `.git/`).
GITLEAKS_REPORT_DIR=${GITLEAKS_REPORT_DIR:-/tmp/gitleaks-accounts.svc.plus}
REPORT_PATH="$GITLEAKS_REPORT_DIR/report.json"
# Check if gitleaks is installed