From bb4792d8ae8cc39481d2ec79503e2e604a88da40 Mon Sep 17 00:00:00 2001
From: Paul Schneider <paul@pschneider.fr>
Date: Mon, 7 Sep 2026 12:56:48 +0100
Subject: [PATCH] Gitleaks integration

---
 .gitleaksignore  | 45 +++++++++++++++++++++++++++++++++++++++++++++
 contrib/Makefile |  2 --
 2 files changed, 45 insertions(+), 2 deletions(-)
 create mode 100644 .gitleaksignore

diff --git a/.gitleaksignore b/.gitleaksignore
new file mode 100644
index 000000000..056cf69d2
--- /dev/null
+++ b/.gitleaksignore
@@ -0,0 +1,45 @@
+# Exclure uniquement les dossiers de sortie de compilation
+bin/
+obj/
+src/*/bin/
+src/*/obj/
+test/*/bin/
+test/*/obj/
+
+# Toolchain front (Node / esbuild)
+node_modules/
+build/
+package-lock.json
+
+# Exclure les caches lourds
+.git/
+.vs/
+
+.env
+
+.*.env
+
+*.csproj.lscache
+data/
+appsettings.*.json
+appsettings-*.*.json
+
+# Exception: the Testing-environment override for Yavsc.Org is a tracked
+# configuration source, not a secrets file. TestWebApplicationFactory
+# (Yavsc.Org.Tests) flips ASPNETCORE_ENVIRONMENT to "Testing" so
+# AddConfiguration("org") in Program.Main loads this file as the
+# last in the chain (it is optional). It overrides the connection
+# string and SMTP section for the in-memory test host and contains
+# no production secrets.
+!src/Yavsc.Org/appsettings-org.Testing.json
+
+generated/
+*.tmp
+tmp/
+DataDir/
+
+*.tests.trx
+*.tests.html
+
+*.log
+
diff --git a/contrib/Makefile b/contrib/Makefile
index 0a61eedc3..79145668f 100644
--- a/contrib/Makefile
+++ b/contrib/Makefile
@@ -1,8 +1,6 @@
 APP_PROJECT_NAMES=Org Blogs Api
 SLNDIR=..
 
-MAIN_SECRET="4QqkjsfS34qlmskjfd5FD923c65sdf-654"
-
 include $(SLNDIR)/.env
 include .env