The .gitleaks-baseline.json That Suppressed Live Production Secrets

A gitleaks baseline file is supposed to suppress known-false-positive findings. It turned out to be suppressing the live rpc_secret and admin_token for a production Garage S3 cluster - unrotated since the commit that introduced them to a public repo months earlier.

Raccontata dadev.to