Pulse/.gitleaksignore

# browser-verification.json stores SHA-256 digests beside the API token manager
# source paths. That path context makes the generic API-key rule classify the
# required content digests as credentials; suppress only those exact fingerprints.
frontend-modern/browser-verification.json:generic-api-key:11
frontend-modern/browser-verification.json:generic-api-key:12

# Schema-v4 secure-runtime evidence stores SHA-256 source digests beside source
# paths whose names contain auth/token terminology. Suppress only those exact
# generated path/rule/line fingerprints; the transcript remains fully scanned.
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:80
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:81
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:82
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:83
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:84
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:87
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:97
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:119
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:128
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:129
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:130
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:135
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:144
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:242
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:262
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:277
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v4-2026-08-30.json:generic-api-key:304
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:56
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:57
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:58
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:59
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:60
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:63
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:73
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:95
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:104
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:105
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:106
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:111
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:120
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:218
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:238
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:253
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v4-2026-08-30.json:generic-api-key:280

# Schema-v6 secure-runtime evidence stores SHA-256 source digests beside source
# paths whose names contain auth/token terminology. Suppress only those exact
# generated path/rule/line fingerprints; the transcript remains fully scanned.
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:88
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:89
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:90
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:91
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:92
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:95
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:105
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:127
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:136
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:137
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:138
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:143
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:152
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:250
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:270
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:285
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:311
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:312
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:315
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:363
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:431
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:433
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:440
docs/release-control/v6/internal/records/secure-agent-runtime-committed-main-attestation-v6-2026-08-31.json:generic-api-key:470
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:64
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:65
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:66
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:67
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:68
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:71
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:81
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:103
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:112
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:113
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:114
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:119
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:128
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:226
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:246
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:261
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:287
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:288
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:291
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:339
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:407
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:409
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:416
docs/release-control/v6/internal/records/secure-agent-runtime-systemd-receipt-v6-2026-08-31.json:generic-api-key:446

# Historical findings proven to be deterministic examples, placeholders, or
# public-key/path false positives. Keep these commit-, path-, rule-, and
# line-specific so provider credentials and expired tokens remain visible.
05491b990d59ea9237cfc559d35828340a4761ac:frontend-modern/src/components/Settings/Settings.tsx:curl-auth-header:1587
0824e22338e65b2fa4c72bafc181cf5738674a2e:docs/SECURITY.md:generic-api-key:39
0824e22338e65b2fa4c72bafc181cf5738674a2e:docs/SECURITY.md:generic-api-key:126
13eebae80e81e48c4e5d02623baff3de416fd31e:test-security-fixes.sh:generic-api-key:99
1b9a30e08f539d4ae39fee9716330b08ed7c7f4a:REGISTRATION_TOKEN_DESIGN.md:generic-api-key:28
1fe32a3baabb43225d9f1948e754029fe046b7ce:reports/proxmox-api-test-2025-03-04T11-41-12.389Z.json:generic-api-key:10
261bd7ac74e18363ac2291f73300b396da0c8695:docs/API.md:generic-api-key:473
2788bd2ce37bccafe095c926f906eb4a695644a5:scripts/test-security.sh:curl-auth-header:70
3b425f348824edd8839588a07a1024836aa0b63e:docs/API.md:curl-auth-header:29
4fef3b23be6ca8ddf96b1102f383656376e7473b:testing-tools/registration-token-complete-test.md:curl-auth-header:110
4fef3b23be6ca8ddf96b1102f383656376e7473b:testing-tools/test-registration-tokens.sh:curl-auth-header:68
5a2d808aa16e01de3e1b163f1df3c711005891ce:docs/API.md:generic-api-key:761
5ecf347a05b85457c7ed81cd4c61256e74f64a1e:docs/PBS_PUSH_MODE.md:curl-auth-header:220
5ecf347a05b85457c7ed81cd4c61256e74f64a1e:docs/PBS_PUSH_MODE.md:curl-auth-header:228
61f011af1dd96dbf38dc4f077cdb2410baee40f8:scripts/tests/test-sensor-proxy-http.sh:curl-auth-header:214
659c2ae8342d89d18dfcb73f85a9136ce1f6dc03:frontend-modern/src/components/Settings/GenerateAPIToken.tsx:curl-auth-header:90
6eb1a10d9bb4df8a985422a4c3bc735c3849bcd0:docs/API.md:curl-auth-header:53
7e78676fc44507d71d0a2b9d74e18ef65cd9ea33:docs/REVERSE_PROXY.md:generic-api-key:243
813e987776f96af0245232bd3b9e30b59420da51:docs/CONFIGURATION.md:generic-api-key:81
87fc9e2c60259680326e6dfbe9ca1b6cdfadd893:docs/TROUBLESHOOTING.md:curl-auth-header:29
941cc85cfb945c6145a33e87139ec404381ad213:docs/API.md:curl-auth-user:40
9bb29bd9843e3a3a587a01ef53df947cfc3da19a:docs/PBS_PUSH_MODE.md:generic-api-key:284
9d2bad3af65d08cf4d185d094f2eee82445a99a1:NOTIFICATION_AUDIT.md:generic-api-key:141
b4eb0326770412eefb44d6812eb10f586bd8e6c7:docs/CONFIGURATION.md:curl-auth-header:163
b9524448370c65f9438cdd1d82caad728e6b9534:cmd/pulse-sensor-proxy/main.go:generic-api-key:393
b9524448370c65f9438cdd1d82caad728e6b9534:cmd/pulse-sensor-proxy/main.go:generic-api-key:415
b9524448370c65f9438cdd1d82caad728e6b9534:cmd/pulse-sensor-proxy/main.go:generic-api-key:574
b9524448370c65f9438cdd1d82caad728e6b9534:cmd/pulse-sensor-proxy/ssh.go:generic-api-key:28
bafeea14a393477208948aa9e1f42c1cfd605f59:scripts/test-edge-cases.sh:curl-auth-header:72
bafeea14a393477208948aa9e1f42c1cfd605f59:scripts/test-security.sh:curl-auth-header:54
e7bc33889140bf4c272b3a5a60b3f6894231101b:cmd/pulse-temp-proxy/main.go:generic-api-key:251
e7bc33889140bf4c272b3a5a60b3f6894231101b:cmd/pulse-temp-proxy/main.go:generic-api-key:273
e7bc33889140bf4c272b3a5a60b3f6894231101b:cmd/pulse-temp-proxy/ssh.go:generic-api-key:20
f46ff1792bd53436891c9a7a8b74180f443f0772:docs/API.md:curl-auth-header:48
f46ff1792bd53436891c9a7a8b74180f443f0772:docs/CONFIGURATION.md:curl-auth-header:394
f46ff1792bd53436891c9a7a8b74180f443f0772:docs/REVERSE_PROXY.md:generic-api-key:260
f46ff1792bd53436891c9a7a8b74180f443f0772:docs/TROUBLESHOOTING.md:curl-auth-header:29