# Test files commonly trigger false positives on @pytest.* decorators.
# Tests don't contain real secrets — they use tmp_path / fake values.
tests/test_*.py
tests/e2e/test_*.py
tests/conftest.py
tests/e2e/conftest.py

# HATS-664: synthetic Claude-Code transcript fixtures for the usage parser.
# Transcript-shaped JSON by construction (sessionId + JSONL schema) — that
# shape is exactly what the privacy hook flags, but the values are fake
# (sess-normal / sess-mal / sess-sub), no real session IDs or prompts.
tests/fixtures/transcripts/*.jsonl

# HATS-633: the git-mastery skill doc *catalogues* the secret patterns the hook
# detects, so its examples (home paths, credentialed DB URIs, token prefixes)
# are pattern-shaped by design — documentation of the scanner, not a real leak.
library/core/skills/git-mastery/SKILL.md
