git-shield.toml

[git_shield]
# Project-level overrides for the global git-shield install.
# Static i18n translation dictionaries: lots of regional vocabulary that the
# OPF person-name model misclassifies. They never contain customer data —
# they're public UI strings shipped with the frontend.
ignore_globs = [
  "web/messages/vec.json",
  # Generated lockfile: full of public npm package funding/sponsor URLs
  # (opencollective.com, github.com/sponsors/*) that the PII scanner
  # mistakes for sensitive data. Not secrets, regenerated on every bump.
  "website/package-lock.json",
  # Binary image/marketing assets: raw bytes occasionally misread as a
  # person's name by the PII scanner. No text content to leak.
  "website/public/assets/*.jpg",
  "website/src/assets/*.webp",
]
allowlist_paths = [".pii-allowlist"]