{
  "suppressions": [
    {
      "id": "gitleaks-generic-api-key-45",
      "justification": "False positive. tests/test_submit_order.py defines a synthetic Google OAuth audience used only for mocked token verification. OAuth client IDs are public identifiers, this fixture is not a credential, and the tests make no real Google or AWS calls."
    }
  ]
}