-
Notifications
You must be signed in to change notification settings - Fork 205
Expand file tree
/
Copy path.gitleaksignore
More file actions
59 lines (56 loc) · 3.44 KB
/
Copy path.gitleaksignore
File metadata and controls
59 lines (56 loc) · 3.44 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
# Reviewed public telemetry ingestion key. PostHog project ingestion keys are
# intentionally embedded in clients and do not grant administrative access.
assets/welcome/welcome.html:generic-api-key:262
autonomy/telemetry.sh:generic-api-key:56
dashboard/telemetry.py:generic-api-key:28
# Reviewed product/configuration prose; these values are feature flags and
# iteration settings, not credentials.
SKILL.md:generic-api-key:10
docs/CONFIG-FILE-PLAN.md:generic-api-key:362
# Reviewed synthetic test and fixture values. Each is deliberately secret-shaped
# so the corresponding scanner, redaction, policy, or lifecycle test is
# non-vacuous. Exact fingerprints ensure a changed line is reviewed again.
dashboard-ui/tests/ui-components.test.js:stripe-access-token:322
loki-ts/tests/runner/quality_gates.test.ts:aws-access-token:1213
tests/fixtures/project-graph/acme/ui/.loki/state/project-graph.json:generic-api-key:2
tests/crash/test_crash_redact.py:jwt:58
tests/integrations/linear-client.test.js:generic-api-key:22
tests/policies/types.test.js:generic-api-key:265
tests/policies/types.test.js:generic-api-key:275
tests/policies/types.test.js:github-pat:275
tests/integrations/linear-config.test.js:generic-api-key:99
tests/integrations/linear-config.test.js:generic-api-key:105
tests/policies/engine.test.js:generic-api-key:287
tests/test-memory-capture-wedge.sh:curl-auth-header:143
tests/test-branch-lifecycle.sh:generic-api-key:570
tests/test-branch-lifecycle.sh:generic-api-key:894
tests/test-invariant-detector.sh:aws-access-token:37
tests/test-invariant-detector.sh:aws-access-token:175
tests/test-invariant-detector.sh:aws-access-token:179
tests/test-invariant-detector.sh:aws-access-token:185
tests/test-secret-gate-false-positives.sh:generic-api-key:58
tests/test-secret-gate-false-positives.sh:generic-api-key:60
tests/test-secret-gate-false-positives.sh:generic-api-key:61
tests/test-secret-scan.sh:generic-api-key:145
tests/test-secret-scan.sh:private-key:128
tests/test-review-command.sh:generic-api-key:64
tests/test-review-command.sh:generic-api-key:150
tests/test-secure-scan.sh:private-key:104
tests/test-secure-scan.sh:aws-access-token:124
tests/test-secure-scan.sh:aws-access-token:140
tests/test-secure-scan.sh:aws-access-token:376
tests/test_proof_redaction.py:private-key:66
# Reviewed historical findings. Commit-qualified fingerprints preserve full-
# history coverage without suppressing a similar finding in another commit.
# The first four are scanner/static-analysis test fixtures, the next three are
# the same public PostHog ingestion key already reviewed above, and the final
# two are removed SDK guardrail examples with deliberately secret-shaped data.
814ca022112c37421438b6caa4504fb101b16b95:.github/workflows/security-audit.yml:aws-access-token:291
7aef191c46db5750233257cb9a0df207e55d13e5:tests/test-branch-lifecycle.sh:generic-api-key:558
7aef191c46db5750233257cb9a0df207e55d13e5:tests/test-branch-lifecycle.sh:generic-api-key:882
7108c7a49ca3c5a808778bb82e1b4d4600ae972b:loki-ts/tests/runner/quality_gates.test.ts:aws-access-token:1094
59f613f682392a570ffec8022d4de74952bdafc3:autonomy/telemetry.sh:generic-api-key:7
59f613f682392a570ffec8022d4de74952bdafc3:bin/postinstall.js:generic-api-key:107
59f613f682392a570ffec8022d4de74952bdafc3:dashboard/telemetry.py:generic-api-key:18
8fcf54725743dc9d18aed64db7d3701c1eb8a4ef:the_app/sdk/examples/03_guardrails.py:generic-api-key:68
8fcf54725743dc9d18aed64db7d3701c1eb8a4ef:the_app/sdk/tests/test_guardrails.py:generic-api-key:129