# Gitleaks config for NoFUD (extends defaults).
# Used by scripts/scan_git_secrets.sh and any local `gitleaks detect`.

title = "NoFUD"

[extend]
useDefault = true

[allowlist]
description = "Public F-Droid AllowedAPKSigningKeys certificate SHA-256 (not a secret)"
regexTarget = "match"
regexes = [
  '''AllowedAPKSigningKeys:\s*[0-9a-fA-F]{64}''',
]
