# Gitleaks allowlist for iris_x_hermes.
#
# pi-lens runs `gitleaks detect --no-git` over the working tree, which includes
# git-ignored paths. The hits below are all false positives:
#   - hermes-agent/        read-only research reference (never committed)
#   - **/build/**          Gradle / jpackage build artifacts (regenerated)
#   - google-services.json standard Firebase config; its "API key" is a web
#                          client key restricted by package name + SHA-1, and
#                          the file is git-ignored (optional; FCM is inert
#                          without it).
title = "iris_x_hermes gitleaks allowlist"

[allowlist]
description = "Git-ignored reference tree, build artifacts, and Firebase config"
paths = [
  '''^hermes-agent/''',
  '''.*/build/''',
  '''^app/androidApp/google-services\.json$''',
]