add an exeption for catalog-info.yaml files

[cesarlugoe]

Testing a bulk PR for adding this file in forms-api, breaks the build because of a false positive.

Because we are going to do a bulk PR adding this file to all repositories, and this file will never need have any kind of secrets, I thought it would be a good idea to skip it.

This file will be added automatically in all repositories, hence the idea

This is the Action prompt

This is the line giving the false positive:
https://github.com/Typeform/forms-api/blob/40a327bdaf24a956fc1e51c46b6edea645812a5e/catalog-info.yaml#L21

[davidsalvador-tf]

Hi @cesarlugoe, if possible I would try to avoid excluding entire files that are not auto generated (e.g. manifest lock files) or not subject to be changed by the developer (e.g. images or binaries). Today this catalog-info.yaml might not include secrets but this can change over time and there's the risk about forgetting to change this.

What about adding #gitleaks:allow at the end of the line with the false positive (more info)?

[cesarlugoe]

Yes, that works @davidsalvador-tf easy fix. Thank you!