From 042090f1fffd5fc7a9259213f32d8af056e94c2c Mon Sep 17 00:00:00 2001
From: markankamaransheogarat-sys
 <279850453+markankamaransheogarat-sys@users.noreply.github.com>
Date: Sat, 24 Oct 2026 16:33:41 +0300
Subject: [PATCH 1/2] fix(security): configure gitleaks allowlist for test
 fixtures and public client IDs (#211)

Signed-off-by: markankamaransheogarat-sys <279850453+markankamaransheogarat-sys@users.noreply.github.com>
---
 .gitleaks.toml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.gitleaks.toml b/.gitleaks.toml
index 9dec22224..c305ad4bf 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -5,6 +5,14 @@
 useDefault = true
 
 [allowlist]
-description = "Documentation placeholders, not credentials"
+description = "Documentation placeholders, public OAuth/telemetry client constants, and test fixtures"
 regexTarget = "match"
 regexes = ['''^your_[a-z_]+>''']
+paths = [
+  '''apps/[^/]+/tests/.*''',
+  '''packages/[^/]+/tests/.*''',
+  '''docs/quality/.*''',
+  '''agent-skills/space-hyperframes/media-use/scripts/lib/telemetry\.mjs''',
+  '''packages/gateway/src/providers/claude/oauth\.ts''',
+  '''packages/gateway/dist/providers/claude/oauth\.(js|d\.ts)'''
+]

From e46bb211be52838d0aef1d493de74564db1c0d98 Mon Sep 17 00:00:00 2001
From: markankamaransheogarat-sys
 <279850453+markankamaransheogarat-sys@users.noreply.github.com>
Date: Sun, 25 Oct 2026 08:35:55 +0000
Subject: [PATCH 2/2] fix(security): drop production file path exemptions and
 scope gitleaks allowlist to public constants

Signed-off-by: markankamaransheogarat-sys <279850453+markankamaransheogarat-sys@users.noreply.github.com>
---
 .gitleaks.toml | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/.gitleaks.toml b/.gitleaks.toml
index c305ad4bf..8166ee8f7 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -7,12 +7,13 @@ useDefault = true
 [allowlist]
 description = "Documentation placeholders, public OAuth/telemetry client constants, and test fixtures"
 regexTarget = "match"
-regexes = ['''^your_[a-z_]+>''']
+regexes = [
+  '''^your_[a-z_]+>''',
+  '''phc_zjjbX0PnWxERXrMHhkEJWj9A9BhGVLRReICgsfTMmpx''',
+  '''9d1c250a-e61b-44d9-88ed-5944d1962f5e'''
+]
 paths = [
   '''apps/[^/]+/tests/.*''',
   '''packages/[^/]+/tests/.*''',
-  '''docs/quality/.*''',
-  '''agent-skills/space-hyperframes/media-use/scripts/lib/telemetry\.mjs''',
-  '''packages/gateway/src/providers/claude/oauth\.ts''',
-  '''packages/gateway/dist/providers/claude/oauth\.(js|d\.ts)'''
+  '''docs/quality/.*'''
 ]