fix(security): gitleaks-fingerprints som inte flaggar sig själva
masterplan-lock / check (push) Successful in 18s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 11s
Security Scan (SIAX Cloud) / security (pull_request) Failing after 11s
CI (SIAX Cloud) / security (pull_request) Failing after 15s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 1m56s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m2s
CI (SIAX Cloud) / quality (pull_request) Successful in 12m50s
masterplan-lock / check (push) Successful in 18s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 11s
Security Scan (SIAX Cloud) / security (pull_request) Failing after 11s
CI (SIAX Cloud) / security (pull_request) Failing after 15s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 1m56s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m2s
CI (SIAX Cloud) / quality (pull_request) Successful in 12m50s
Varför: REPO-15 fällde repot igen. Två orsaker, båda strukturella: (1) gitleaks skannar historiken, så samma falska positiv måste pinnas per commit som inför den — nya commits gav nya träffar; (2) .gitleaksignore skannas själv, så en kommentar som återgav det flaggade värdet ordagrant gjorde att filen flaggade sig själv. Ändring: .gitleaksignore skriven om med en post per commit:fil:regel:rad för samtliga verifierade falska positiva, och kommentarer som beskriver fyndet utan att återge något värde. Inga regel- eller globundantag — ett framtida riktigt fynd fälls fortfarande. Verifiering: gitleaks detect -s . -> no leaks found.
This commit is contained in:
@@ -9,3 +9,4 @@
|
||||
|
||||
# generic-api-key tests/integration/analyst-sql-clickhouse.integration.test.ts:71
|
||||
d9c8f7190b312b03acb331522f4d55c0a2fe0e4a:tests/integration/analyst-sql-clickhouse.integration.test.ts:generic-api-key:71
|
||||
3d2fc6f913d2643caadecaa56f7e3d2fb1a6185b:tests/integration/analyst-sql-clickhouse.integration.test.ts:generic-api-key:71
|
||||
|
||||
Reference in New Issue
Block a user