mirror of
https://github.com/pewdiepie-archdaemon/odysseus.git
synced 2026-10-29 01:02:25 +01:00
test(security): allowlist synthetic dummy api key in trace sanitizer test fixture
- Add gitleaks allowlist rule for synthetic test string in tests/test_trace_artifact_sanitizer.py - Resolves Gitleaks generic-api-key false positive on GitHub Actions CI
This commit is contained in:
@@ -35,3 +35,15 @@ regexTarget = "secret"
|
|||||||
regexes = [
|
regexes = [
|
||||||
'''^7abc5b334a6c3c52dd3eba15d8bc516da728a67f14fb7f56d0bb5992d89a16ca$''',
|
'''^7abc5b334a6c3c52dd3eba15d8bc516da728a67f14fb7f56d0bb5992d89a16ca$''',
|
||||||
]
|
]
|
||||||
|
|
||||||
|
[[allowlists]]
|
||||||
|
description = "Synthetic dummy API key in trace artifact sanitizer test fixture"
|
||||||
|
targetRules = ["generic-api-key"]
|
||||||
|
condition = "AND"
|
||||||
|
paths = [
|
||||||
|
'''(?:^|/)tests/test_trace_artifact_sanitizer\.py$''',
|
||||||
|
]
|
||||||
|
regexTarget = "secret"
|
||||||
|
regexes = [
|
||||||
|
'''^sk-123456789$''',
|
||||||
|
]
|
||||||
|
|||||||
Reference in New Issue
Block a user