From 3dada3fc06308d8c4e379dadbd2fd6f3dee68b5e Mon Sep 17 00:00:00 2001
From: user <user@rpios.local>
Date: Sun, 22 Feb 2026 06:09:28 +0100
Subject: [PATCH] fix: allowlist tests/ in gitleaks, add libopus for CI test
 job

- gitleaks flagged fake api_key in test fixtures as a secret leak;
  allowlist tests/ directory since it contains only mock data
- Install libopus0 in test runner for pymumble/opuslib import chain

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .gitea/workflows/ci.yml | 1 +
 .gitleaks.toml          | 2 ++
 2 files changed, 3 insertions(+)
 create mode 100644 .gitleaks.toml

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 58649b6..a7d1dc3 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -41,6 +41,7 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
+      - run: sudo apt-get update && sudo apt-get install -y libopus0
       - run: pip install -e . && pip install pymumble pytest
       - run: pytest -v
 
diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000..6b118db
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,2 @@
+[allowlist]
+  paths = ["tests/"]