Repository navigation
ci(secret-scan): allowlist bundle compatibility fixtures for commit b0fd15ee in .gitleaksignore - #2168
Open
yunusarda-sudo wants to merge 1 commit into
Conversation
…0fd15e in .gitleaksignore Commit b0fd15e (OpenAdaptAI#1928) introduced bundle compatibility fixtures in packages/flow/tests/fixtures/bundle_compatibility/ and added 33 fingerprints to .gitleaksignore under the pre-merge branch commit 8ccf2cf. When the PR was merged into main as b0fd15e, the commit hash changed. As a result, subsequent pull requests whose history includes b0fd15e trigger 33 unfiltered findings in secret-scan.yml's gitleaks step. Add the 33 corresponding fingerprints with commit b0fd15e so secret scanning ignores these published, non-credential bundle fixtures.
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What kind of change does this PR introduce?
CI/CD bug fix
Summary
Commit b0fd15e (#1928) introduced bundle compatibility fixtures under
packages/flow/tests/fixtures/bundle_compatibility/and allowlisted 33 fingerprints in.gitleaksignoreunder pre-merge branch commit8ccf2cf3360b7d7720af04c36eee4f8e756bdf6e.When #1928 merged into
mainas commitb0fd15ee, the commit hash changed. As a result, subsequent pull requests branched from or rebased onto main trigger 33 unfiltered findings insecret-scan.yml's gitleaks step on commitb0fd15ee.This PR adds the 33 corresponding fingerprints with commit hash
b0fd15ee8584cc3b646ae9bab04b4f9acbc59292so that secret scanning on PRs ignores these published, non-credential bundle fixtures.Checklist
Notes
Investigated and verified with Antigravity / Claude Code with local test verification (
tests/test_gitleaks_metadata.pypasses 20/20, local gitleaks test reports 0 findings on commit b0fd15e).