CI: restore main detect-secrets scan (#38438)

* Tests: stabilize detect-secrets fixtures

* Tests: fix rebased detect-secrets false positives

* Docs: keep snippets valid under detect-secrets

* Tests: finalize detect-secrets false-positive fixes

* Tests: reduce detect-secrets false positives

* Tests: keep detect-secrets pragmas inline

* Tests: remediate next detect-secrets batch

* Tests: tighten detect-secrets allowlists

* Tests: stabilize detect-secrets formatter drift
This commit is contained in:
Vincent Koc
2026-03-07 13:06:35 -05:00
committed by GitHub
parent 46e324e269
commit e4d80ed556
137 changed files with 1231 additions and 2700 deletions

View File

@@ -57,7 +57,7 @@ function makeMoonshotConfig(home: string, storePath: string) {
providers: {
moonshot: {
baseUrl: "https://api.moonshot.ai/v1",
apiKey: "sk-test",
apiKey: "sk-test", // pragma: allowlist secret
api: "openai-completions",
models: [makeModelDefinition("kimi-k2-0905-preview", "Kimi K2")],
},
@@ -133,13 +133,13 @@ describe("directive behavior", () => {
providers: {
minimax: {
baseUrl: "https://api.minimax.io/anthropic",
apiKey: "sk-test",
apiKey: "sk-test", // pragma: allowlist secret
api: "anthropic-messages",
models: [makeModelDefinition("MiniMax-M2.5", "MiniMax M2.5")],
},
lmstudio: {
baseUrl: "http://127.0.0.1:1234/v1",
apiKey: "lmstudio",
apiKey: "lmstudio", // pragma: allowlist secret
api: "openai-responses",
models: [makeModelDefinition("minimax-m2.5-gs32", "MiniMax M2.5 GS32")],
},
@@ -166,7 +166,7 @@ describe("directive behavior", () => {
providers: {
minimax: {
baseUrl: "https://api.minimax.io/anthropic",
apiKey: "sk-test",
apiKey: "sk-test", // pragma: allowlist secret
api: "anthropic-messages",
models: [
makeModelDefinition("MiniMax-M2.5", "MiniMax M2.5"),
@@ -215,13 +215,13 @@ describe("directive behavior", () => {
providers: {
moonshot: {
baseUrl: "https://api.moonshot.ai/v1",
apiKey: "sk-test",
apiKey: "sk-test", // pragma: allowlist secret
api: "openai-completions",
models: [makeModelDefinition("kimi-k2-0905-preview", "Kimi K2")],
},
lmstudio: {
baseUrl: "http://127.0.0.1:1234/v1",
apiKey: "lmstudio",
apiKey: "lmstudio", // pragma: allowlist secret
api: "openai-responses",
models: [makeModelDefinition("kimi-k2-0905-preview", "Kimi K2 (Local)")],
},

View File

@@ -213,7 +213,7 @@ export function registerTriggerHandlingUsageSummaryCases(params: {
expect(text).toContain("api-key");
expect(text).not.toContain("sk-test");
expect(text).not.toContain("abcdef");
expect(text).not.toContain("1234567890abcdef");
expect(text).not.toContain("1234567890abcdef"); // pragma: allowlist secret
expect(text).toContain("(anthropic:work)");
expect(text).not.toContain("mixed");
expect(runEmbeddedPiAgentMock).not.toHaveBeenCalled();