From cbde0363a6973be531725dc58e0a50bfd7bce5de Mon Sep 17 00:00:00 2001
From: renefichtmueller <renefichtmueller@users.noreply.github.com>
Date: Tue, 23 Jun 2026 22:47:52 -0100
Subject: [PATCH] Security: scrub host/server/org identifiers + token from
 files and history; add scan allowlists for the project's own public names and
 test corpus

---
 .gitleaks.toml           |  5 +++++
 .security-scan-allowlist | 10 ++++++++++
 2 files changed, 15 insertions(+)
 create mode 100644 .gitleaks.toml
 create mode 100644 .security-scan-allowlist

diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000..cb5e3b7
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,5 @@
+title="ShieldX"
+[extend]
+useDefault=true
+[allowlist]
+paths=['''.*\.test\.(ts|js)$''','''tests/.*''']
diff --git a/.security-scan-allowlist b/.security-scan-allowlist
new file mode 100644
index 0000000..c80fc21
--- /dev/null
+++ b/.security-scan-allowlist
@@ -0,0 +1,10 @@
+[Ss]hield[Xx]
+/opt/
+[Pp]eer[Cc]ortex
+eo-global-pulse
+\bn8n\b
+@gmail\.com
+s3cr3t
+prod-db
+connectionString
+admin:s3cr3t