From 227b582a635487f7842a96b830961ba1ee095f42 Mon Sep 17 00:00:00 2001
From: hermes-gadget <284726080+hermes-gadget@users.noreply.github.com>
Date: Sat, 17 Oct 2026 04:11:33 +0100
Subject: [PATCH] fix(ci): ignore reviewed MeshCore public-channel material in
 full-history scan

The full-history gitleaks scan flags the documented MeshCore public channel
key (publicly known 16-byte material; see MeshCore docs/companion_protocol.md)
at two files that exist only in history (deploy-sync commit 1d24322; both
files were later removed from main). Add the exact reviewed fingerprints to
.gitleaksignore, matching the existing channelRegistry precedent. No scan
scope, rule, or workflow changes; the local full-history scan reports no leaks.
---
 .gitleaksignore | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.gitleaksignore b/.gitleaksignore
index 3bcbb2a..7ee3c6c 100644
--- a/.gitleaksignore
+++ b/.gitleaksignore
@@ -49,3 +49,8 @@ cd9ee586364ed70c5298d36eba0bb92958725b2d:website-live-manifest.staging.json:gene
 cd9ee586364ed70c5298d36eba0bb92958725b2d:website-live-manifest.json:generic-api-key:40
 5210aba5e37b928db3744057beb78f2c17f92263:website-live-manifest.json:generic-api-key:38
 ac4ee2afecc16ed67fdc09cf70953dc85d3a4c5a:website-live-manifest.staging.json:generic-api-key:38
+# MeshCore documented public channel material (publicly known 16-byte key;
+# see MeshCore docs/companion_protocol.md). History-only occurrences from the
+# deploy-sync commit 1d24322; both files were later removed from main.
+1d243222ef464a2e4c95cbce9e7a4ecd166534db:backend/backfill-region-names.mjs:generic-api-key:42
+1d243222ef464a2e4c95cbce9e7a4ecd166534db:backend/src/tools/rebuildRegionParticipation.ts:generic-api-key:45