forked from HKUDS/DeepCode
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.gitleaksignore
More file actions
46 lines (39 loc) · 2.95 KB
/
Copy path.gitleaksignore
File metadata and controls
46 lines (39 loc) · 2.95 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
# Historical mcp_agent.secrets.yaml findings. The file has long been removed
# and current secret files are ignored. The exposed credentials must be
# rotated/revoked before release; these fingerprints prevent acknowledged
# history from masking new leaks in CI.
b2dccbe6d37e74e98b8a57593c1a5bb4994fba59:mcp_agent.secrets.yaml:generic-api-key:9
420d07580e83885cdf784115131aea884e704a8f:mcp_agent.secrets.yaml:generic-api-key:2
225e344437173185f22f30cbac58fc82f9fbe3ed:mcp_agent.secrets.yaml:generic-api-key:2
# Test fixture, not a credential: the literal "sk-secret123456" inside a
# RuntimeError message, used to assert that error text is redacted before it
# reaches the UI. It arrived with the #131 merge, which recorded the branch in
# history without applying its tree — so the file does not exist on main and
# the finding cannot be fixed by editing it.
6421db9a2fb04589200f8883f950a329b7ced1cd:tests/ui_session_resume_test.py:generic-api-key:87
# Test fixture, not a credential: the config-layer redaction test assigns a
# placeholder to "apiKey", which the generic rule flags regardless of value
# shape (the key name is the trigger). The working tree now carries an inline
# gitleaks:allow; these fingerprints acknowledge the immutable historical
# commits (the original fixture and its first, value-only fix attempt).
86294aa61c2fc68dbbd51dbb8a594700fb38e3dc:tests/test_config_layers.py:generic-api-key:80
46f1b7111706e58cd2b457c9483fda8fcbbb07eb:tests/test_config_layers.py:generic-api-key:82
# JWT fixtures in test_memory_distill_structured.py — both are `eyJhbGciOi...`
# JWTs from the HKUDS/DeepCode upstream commit history, clearly test-only data.
# Current file has no JWT secrets.
485c993f8ea95df309782dc494f750db3d512f73:tests/test_memory_distill_structured.py:jwt:43
ad2a60a6e2dad27ea784c9703dd8ea999e3f57d9:tests/test_memory_distill_structured.py:jwt:41
# Historical Tushare token in cerebellum_mcp_server.py — the current working
# tree no longer carries any token value on that line.
a8045cc32e9a8e342594c82f5c3b63a741bb5de4:.deepcode/skills/deepcode-cerebellum/cerebellum_mcp_server.py:generic-api-key:416
# Historical Tushare token in mcp_servers_canonical.json — the current file now
# uses ${TUSHARE_TOKEN} env var reference instead of a hardcoded value.
59078649a5371e36b958782b490fb31947ffc349:mcp_servers_canonical.json:generic-api-key:9
# Test fixture placeholder keys in test_mcp_manager.py — placeholder values used
# in MCP manager unit tests, not real credentials. Current file has no real secrets.
c812dca0c0d3b09a811197d03121cb46f8021a8d:tests/test_mcp_manager.py:generic-api-key:42
c812dca0c0d3b09a811197d03121cb46f8021a8d:tests/test_mcp_manager.py:generic-api-key:55
# Self-ignored: commit 92881ea1 contains .gitleaksignore comments with test fixture
# pattern strings that trigger generic-api-key. Fixed in e1fb6ab9.
92881ea1a192629028aa9115b5fa3af912ee4411:.gitleaksignore:generic-api-key:38
92881ea1a192629028aa9115b5fa3af912ee4411:.gitleaksignore:generic-api-key:39