From 7bfe45209780f10595ad948c50819c7bfbad8728 Mon Sep 17 00:00:00 2001 From: reeshika-h Date: Mon, 10 Aug 2026 12:39:12 +0530 Subject: [PATCH] fix: suppress Snyk hardcoded-secret false positive in bundler test fixtures Test fixtures use placeholder API keys/tokens, not real secrets. Add inline deepcode ignore annotations so Snyk Code suppresses the finding at the source instead of relying on org-level web UI ignores. Co-Authored-By: Claude Sonnet 5 --- test/bundlers/esbuild-app/src/index.js | 1 + test/bundlers/rollup-app/src/index.js | 1 + 2 files changed, 2 insertions(+) diff --git a/test/bundlers/esbuild-app/src/index.js b/test/bundlers/esbuild-app/src/index.js index fc7d6d75..d991d341 100644 --- a/test/bundlers/esbuild-app/src/index.js +++ b/test/bundlers/esbuild-app/src/index.js @@ -53,6 +53,7 @@ const regions = [ regions.forEach(({ name, check }) => { test(`SDK works with ${name} region`, () => { const stack = contentstack.stack({ + // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret apiKey: 'test_key', deliveryToken: 'test_token', environment: 'test', diff --git a/test/bundlers/rollup-app/src/index.js b/test/bundlers/rollup-app/src/index.js index c9904a4d..70d1f569 100644 --- a/test/bundlers/rollup-app/src/index.js +++ b/test/bundlers/rollup-app/src/index.js @@ -53,6 +53,7 @@ const regions = [ regions.forEach(({ name, check }) => { test(`SDK works with ${name} region`, () => { const stack = contentstack.stack({ + // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret apiKey: 'test_key', deliveryToken: 'test_token', environment: 'test',