From 578a31fdd45ca8e6c3f0ed796b7af78cb4238ecc Mon Sep 17 00:00:00 2001
From: ciregenz <ciregenz@berkeley.edu>
Date: Mon, 15 Jun 2026 13:54:40 -0700
Subject: [PATCH] [eric] ci: allowlist the cdp-routes redaction-test token in
 gitleaks

---
 .gitleaks.toml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitleaks.toml b/.gitleaks.toml
index 5437f1d5..37ec358f 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -15,6 +15,9 @@ description = "Project allowlist for gitleaks"
 # still trip.
 paths = [
   '''frontend/src/app/pages/Settings/Settings\.tsx''',
+  # CDP-redaction test: its fixtures are deliberately fake `token=...` URLs it
+  # then asserts get redacted, so a full-history rescan keeps "finding" them.
+  '''electron/cdp-routes\.test\.js''',
   # Vendored Python venv — never our code.
   '''backend/\.venv/.*''',
   # Vendored MCP server bundles (esbuild output of upstream npm packages).