# .gitleaks.toml
# Secret detection config — extends gitleaks default rules

title = "opencode-devbox"

[extend]
useDefault = true

# Global allowlist — safe files that may contain example keys/patterns
[[allowlists]]
description = "Allow example and template files"
paths = [
  '''\.env\.example$''',
  '''\.env\.sample$''',
  '''\.env\.template$''',
  '''README\.md$''',
  '''docs/.*\.md$''',
]