security: allow historical signing fingerprint
0b54bda3b348862c6d65f45912d0f2f243cd2449
Oliver Jan Krylow <oliver@bugabinga.net> · 2026-09-09 12:14 UTC
unverifiable SSH 1 parent
repositories / dotfiles
dotfiles
bugabingas dorkfiles
owned by admin
Changed files (1)
.gitleaks.toml
ready@@ -1,0 +1,10 @@
+[extend]
+useDefault = true
+
+[[allowlists]]
+description = "Public Git signing-key fingerprint in historical host configuration"
+condition = "AND"
+targetRules = ["generic-api-key"]
+regexTarget = "line"
+paths = ['''^git/\.gitconfig\.EJ-PC-00363$''']
+regexes = ['''(?i)^\s*singingkey\s*=\s*[0-9a-f]{40}\s*$''']