vrr/airsonic-pulse
2
0
Fork 0
mirror of https://github.com/Airsonic-Pulse/airsonic-pulse.git synced 2026-07-09 21:18:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

chore: add gitleaks baseline for inherited upstream findings (#161)

Browse source 
Three pre-existing findings from upstream airsonic-advanced and subsonic
history are documented as accepted: reCAPTCHA defaults and the legacy
Last.fm API key. All have been publicly visible in upstream repos for
years.

Co-authored-by: litebito <litebito@users.noreply.github.com>
This commit is contained in:
litebito 2026-05-13 13:54:15 +02:00 • committed by GitHub
parent bac4bfe608
commit 7fa7a2295a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
.gitleaksignore Normal file
View file

@ -0,0 +1,12 @@
# Inherited findings from upstream (airsonic-advanced / subsonic).
# Already publicly visible in upstream repos for years; rewriting history
# would not improve exposure and would damage attribution.
# reCAPTCHA default site key — public by design (rendered in HTML)
a928b9ee3ff62a8eb1b5be7f380b6941ca7d7358:airsonic-main/src/main/java/org/airsonic/player/service/SettingsService.java:generic-api-key:201
# reCAPTCHA default secret key — DEFAULT_* placeholder, user-overridable in settings
a928b9ee3ff62a8eb1b5be7f380b6941ca7d7358:airsonic-main/src/main/java/org/airsonic/player/service/SettingsService.java:generic-api-key:202
# Last.fm API key — inherited from original Subsonic (Sindre Mehus, 2016)
a40ad1f7ef65f0058141d316bba3cdc3a5aee1ae:subsonic-main/src/main/java/net/sourceforge/subsonic/service/LastFmService.java:generic-api-key:52