# Known, triaged historical findings. One gitleaks fingerprint per line.
# A fingerprint here only silences the scanner — any real secret listed
# must be ROTATED/REVOKED at its source first.

# .env.public — intentional public/example value.
f4443296d4565ba82ca3ec19303bc929362185eb:.env.public:generic-api-key:9

# benchmark/docker-compose.yml — leaked GITHUB_TOKEN committed 2025-07-16.
# ACTION REQUIRED: token must be revoked (history cannot be un-leaked).
3ee88a4ef923d3f4729c25eccb0096bc7c805cf2:benchmark/docker-compose.yml:github-pat:9

# Revoked TOKENROUTER_API_KEY, committed 2026-08-10, rotated 2026-08-15.
# History intentionally not rewritten (287 forks). Key is dead.
4086d48f7b6e6a772130337cce7a41bce8e99902:.env.public:generic-api-key:19
4f53fc066a68be7b211f5756ad051b2beb504241:.env.public:generic-api-key:19

# TOKENROUTER_API_KEY committed 2026-08-10, revoked 2026-08-15.
# History not rewritten (287 forks); the key is inert.
4086d48f7b6e6a772130337cce7a41bce8e99902:.env.public:generic-api-key:19
4f53fc066a68be7b211f5756ad051b2beb504241:.env.public:generic-api-key:19

# TOKENROUTER_API_KEY committed 2026-08-10, revoked 2026-08-15.
# History not rewritten (287 forks); the key is inert.
4086d48f7b6e6a772130337cce7a41bce8e99902:.env.public:generic-api-key:19
4f53fc066a68be7b211f5756ad051b2beb504241:.env.public:generic-api-key:19

# Known GitHub PAT committed 2025-07-16 in benchmark/docker-compose.yml.
# Token revoked; file removed from the tree. Suppressed by fingerprint so the
# full-history sweep stays green. Do not add entries here without revoking first.
53849c5a3ce83b7c89bee23d9d9f2029ed5549f5:benchmark/docker-compose.yml:github-pat:9
