title = "homelab"
[extend]
useDefault = true
[[rules]]
id = "groq-key"
description = "Groq API key"
regex = '''gsk_[A-Za-z0-9]{20,}'''
[[rules]]
id = "plane-key"
description = "Plane API key"
regex = '''plane_api_[A-Za-z0-9]{10,}'''
[[rules]]
id = "vault-token"
description = "Vault token"
regex = '''hvs\.[A-Za-z0-9_-]{15,}'''
[[rules]]
id = "hex40-token-ctx"
description = "40-hex token in credential context (Gitea etc.)"
regex = '''(?i)(?:tok|token|secret|key|auth|bearer|pass|pwd)['"=: ]{0,12}([a-f0-9]{40})'''
[allowlist]
description = "vendored / lock / build artifacts"
paths = [
  '''.*\.min\.(js|css)$''',
  '''.*-lock\.json$''',
  '''.*\.lock$''',
  '''(^|/)(vendor|dist|node_modules|build|three\.min|mermaid\.min)''',
]