title = "ktg-plugin-marketplace gitleaks config"

# Extend default rules
[extend]
useDefault = true

# Path-based allowlist: vendored design-system MANIFEST.json files
# contain SHA-256 hashes per file by design (drift detection).
# These are public file integrity hashes, not secrets.
[[allowlists]]
description = "Vendored design-system MANIFEST files (SHA-256 file hashes)"
paths = [
  '''playground/vendor/playground-design-system/MANIFEST\.json$''',
]