# Gitleaks configuration for infrastructure repo
# Allowlists for known patterns that are not actual leaked secrets

[allowlist]
  description = "Infrastructure repo allowlist"
  # Terraform tenant VM passwords are managed by VM Bot
  # The .tf files contain passwords needed for Proxmox VM provisioning
  paths = [
    '''environments/production/tenant-vms\.tf''',
  ]