From 6e95caebd4b698d64100302389cb1bc5c33a2bee Mon Sep 17 00:00:00 2001 From: "Jose I. Paris" Date: Wed, 28 Oct 2026 17:50:28 +0100 Subject: [PATCH] chore: move the gitleaks allowlist to the repository root The managed secret-scan workflow runs betterleaks from the repository root, and betterleaks reads .gitleaks.toml only from there. The file in .github/workflows/utils had no reader. Refs: PFM-8051 Assisted-by: Claude Code Signed-off-by: Jose I. Paris Chainloop-Trace-Sessions: 6ef5e9f5-dc0c-45cf-8b3f-70d112a87b7e --- .github/workflows/utils/.gitleaks.toml => .gitleaks.toml | 2 ++ 1 file changed, 2 insertions(+) rename .github/workflows/utils/.gitleaks.toml => .gitleaks.toml (79%) diff --git a/.github/workflows/utils/.gitleaks.toml b/.gitleaks.toml similarity index 79% rename from .github/workflows/utils/.gitleaks.toml rename to .gitleaks.toml index 891594dee..47d7efd05 100644 --- a/.github/workflows/utils/.gitleaks.toml +++ b/.gitleaks.toml @@ -1,3 +1,5 @@ +# Allowlist for gitleaks and betterleaks. The managed secret-scan workflow runs +# betterleaks from the repository root, which reads this file. title = "Gitleaks config" [extend]