Introduce gitleaks to the codebase

- `bin/setup` installs gitleaks - add `gitleaks dir` command to CI - configure gitleaks to ignore tmp, log, and encrypted files - tag existing false positives with `gitleaks:allow` - add historical false positives to the ignore list
2025-11-26 15:46:47 -05:00
parent 1534485477
commit 7f46063c25
8 changed files with 38 additions and 5 deletions
@@ -0,0 +1,9 @@
+[extend]
+useDefault = true
+
+[allowlist]
+paths = [
+  '''log''',
+  '''tmp''',
+  '''.*\.yml\.enc''',
+]