# gitleaks configuration
# tests/ contains invented fixtures (fake Nostr key, fake merchant mail) — allowlisted
# so the full-history scan stays signal-only. See docs/DECISIONS.md D7.

[allowlist]
paths = [
  '''(^|/)tests/''',
]