# Push-scanner path allowlist (scripts/secret_scan.py). The detector-eval
# secrets fixtures are DELIBERATE credentials the detector must keep seeing;
# only the pre-push leak gate skips them. The detector never reads this file.
tests/fixtures/detector_eval/secrets/*
# The precision-fix regression file carries one deliberate detectable value
tests/test_detector_precision_secrets.py
