From 38e5b1ce2567dc847acd3a914d6b6a89bb57e27a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ullrich=20Sch=C3=A4fer?= <hi+github@ullrich.is>
Date: Wed, 25 Mar 2026 11:59:26 +0100
Subject: [PATCH] Fix .gitleaks.toml config syntax

regexTarget is a string field, not an array of objects. Use the correct
allowlist format with regexes array.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .gitleaks.toml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.gitleaks.toml b/.gitleaks.toml
index a3f3fed..5eea8dc 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -1,7 +1,7 @@
-[extend]
-# Use default gitleaks rules
-
-[[allowlist.regexTarget]]
+[allowlist]
 # Sentry DSNs are public (ingest-only, not secrets)
-description = "Sentry DSN"
-regex = '''https://[a-f0-9]+@o\d+\.ingest\.\w+\.sentry\.io/\d+'''
+description = "Allow Sentry DSNs"
+regexTarget = "line"
+regexes = [
+  '''https://[a-f0-9]+@o\d+\.ingest\.\w+\.sentry\.io/\d+''',
+]