Adam Moussa
af5ce7362e
gitleaks git-mode scans committed history, so the .env.example placeholder flags from history and would block the orchestrator's own pre-push gate. Suppress it with a written justification. Also gitignore stray .adf_final*.json left by an unrelated tool.
8 lines
427 B
JSON
8 lines
427 B
JSON
{
|
|
"suppressions": [
|
|
{
|
|
"id": "gitleaks-generic-api-key-2",
|
|
"justification": "False positive. .env.example:2 is a documented placeholder token (not a live secret) that exists to show the required env var shape. gitleaks runs in git-mode and scans committed history, so it flags the placeholder even though the working-tree value is inert. No real credential is or was exposed. Reviewed 2026-06-16."
|
|
}
|
|
]
|
|
}
|