27fc46664f
- Replace sops -d --extract with bao kv get -field in workflow - Remove .sops.yaml and encrypted proxmox.secrets.yaml - Update .gitleaks.toml comment (remove SOPS reference) - Proxmox token now fetched from OpenBao secret/infrastructure/proxmox via AppRole authentication (atlantis role) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
11 lines
370 B
TOML
11 lines
370 B
TOML
# Gitleaks configuration for infrastructure repo
|
|
# Allowlists for known patterns that are not actual leaked secrets
|
|
|
|
[allowlist]
|
|
description = "Infrastructure repo allowlist"
|
|
# Terraform tenant VM passwords are managed by VM Bot
|
|
# The .tf files contain passwords needed for Proxmox VM provisioning
|
|
paths = [
|
|
'''environments/production/tenant-vms\.tf''',
|
|
]
|