security: review RC source scan fixtures
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (pull_request) Failing after 13m8s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (pull_request) Failing after 13m8s
This commit is contained in:
@@ -1,6 +1,52 @@
|
||||
{
|
||||
"version": "1.5.0",
|
||||
"results": {
|
||||
"project-docs/V2-ai-platform-embedding-pgvector-2026-06-22.md": [
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
"filename": "project-docs/V2-ai-platform-embedding-pgvector-2026-06-22.md",
|
||||
"hashed_secret": "141a92417f71895e56c4a5da05f3e98fc78e2220",
|
||||
"line_number": 64,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Documented local-only PostgreSQL credentials."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "project-docs/V2-ai-platform-embedding-pgvector-2026-06-22.md",
|
||||
"hashed_secret": "8031f88f0b06be1613e58bda29c3e949459dc528",
|
||||
"line_number": 67,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Explicit embedding-key placeholder in setup documentation."
|
||||
}
|
||||
],
|
||||
"project-docs/V2-contract-api-persistent-repository-2026-06-23.md": [
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
"filename": "project-docs/V2-contract-api-persistent-repository-2026-06-23.md",
|
||||
"hashed_secret": "d61ceadbdb0081cce7a2c1f65558bd2243ecc161",
|
||||
"line_number": 25,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Documented local-only PostgreSQL credentials."
|
||||
}
|
||||
],
|
||||
"project-docs/V2-database-engineering-baseline-2026-06-24.md": [
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
"filename": "project-docs/V2-database-engineering-baseline-2026-06-24.md",
|
||||
"hashed_secret": "964a0c3a014c640b82d5ab59c4665a323d20a880",
|
||||
"line_number": 127,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Documented local compose credentials."
|
||||
},
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
"filename": "project-docs/V2-database-engineering-baseline-2026-06-24.md",
|
||||
"hashed_secret": "7205a0abf00d1daec13c63ece029057c974795a9",
|
||||
"line_number": 139,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Production example uses explicit CHANGE_ME placeholders."
|
||||
}
|
||||
],
|
||||
"project-docs/V2-phase3-ai-platform-request-tenant-context-2026-07-02.md": [
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
@@ -47,6 +93,32 @@
|
||||
"audit_reason": "Documented local-only PostgreSQL credentials."
|
||||
}
|
||||
],
|
||||
"yuqei-ai-platform/services/ai-platform-api/README.md": [
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
"filename": "yuqei-ai-platform/services/ai-platform-api/README.md",
|
||||
"hashed_secret": "141a92417f71895e56c4a5da05f3e98fc78e2220",
|
||||
"line_number": 17,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Documented local-only PostgreSQL credentials."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-ai-platform/services/ai-platform-api/README.md",
|
||||
"hashed_secret": "11fa7c37d697f30e6aee828b4426a10f83ab2380",
|
||||
"line_number": 49,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Explicit provider-key placeholder in setup documentation."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-ai-platform/services/ai-platform-api/README.md",
|
||||
"hashed_secret": "1488a3ad85e01f333b3220769033ea787a21b793",
|
||||
"line_number": 65,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Explicit embedding-key placeholder in setup documentation."
|
||||
}
|
||||
],
|
||||
"yuqei-ai-platform/services/ai-platform-api/alembic.ini": [
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
@@ -87,6 +159,50 @@
|
||||
"audit_reason": "Synthetic object-storage key used by a mocked unit test."
|
||||
}
|
||||
],
|
||||
"yuqei-ai-platform/services/ai-platform-api/tests/test_platform_data.py": [
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_platform_data.py",
|
||||
"hashed_secret": "80ebbbd0957cbf91ab4f3f39ae05b547b7770116",
|
||||
"line_number": 96,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic environment secret reference used by a unit test."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_platform_data.py",
|
||||
"hashed_secret": "944e39e8ed4859e0901b7ca0830067a935c1587d",
|
||||
"line_number": 165,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic OCR secret reference used by a unit test."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_platform_data.py",
|
||||
"hashed_secret": "f63fad0d3c81d12c8ce8b5907fa29f1d5b4fc2f1",
|
||||
"line_number": 306,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic OCR key asserted by a unit test."
|
||||
}
|
||||
],
|
||||
"yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py": [
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py",
|
||||
"hashed_secret": "3acfb2c2b433c0ea7ff107e33df91b18e52f960f",
|
||||
"line_number": 55,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic provider key used by a mocked unit test."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py",
|
||||
"hashed_secret": "dfd7a37d1dc759fc860644d608aa5d8ad9b53c96",
|
||||
"line_number": 201,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic environment secret reference used by a unit test."
|
||||
}
|
||||
],
|
||||
"yuqei-ai-platform/services/worker/src/yuqei_worker/config.py": [
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
@@ -97,6 +213,16 @@
|
||||
"audit_reason": "Documented local-only PostgreSQL default."
|
||||
}
|
||||
],
|
||||
"yuqei-ai-platform/services/worker/tests/test_health.py": [
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-ai-platform/services/worker/tests/test_health.py",
|
||||
"hashed_secret": "3acfb2c2b433c0ea7ff107e33df91b18e52f960f",
|
||||
"line_number": 30,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic provider key used by a worker health test."
|
||||
}
|
||||
],
|
||||
"yuqei-contract-platform/services/contract-api/.env.example": [
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
@@ -117,6 +243,76 @@
|
||||
"audit_reason": "Documented local-only PostgreSQL credentials."
|
||||
}
|
||||
],
|
||||
"yuqei-contract-platform/services/contract-api/tests/test_contract_workflow.py": [
|
||||
{
|
||||
"type": "Base64 High Entropy String",
|
||||
"filename": "yuqei-contract-platform/services/contract-api/tests/test_contract_workflow.py",
|
||||
"hashed_secret": "9ea8584df2c99619e1919b4d0218b32f8f9fd66a",
|
||||
"line_number": 808,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Contract template identifier in a test request path."
|
||||
}
|
||||
],
|
||||
"yuqei-contract-platform/services/contract-api/tests/test_health.py": [
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
"filename": "yuqei-contract-platform/services/contract-api/tests/test_health.py",
|
||||
"hashed_secret": "d61ceadbdb0081cce7a2c1f65558bd2243ecc161",
|
||||
"line_number": 74,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic local PostgreSQL credentials used by a unit test."
|
||||
}
|
||||
],
|
||||
"yuqei-contract-platform/services/contract-api/tests/test_identity_management.py": [
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
|
||||
"hashed_secret": "6358449ebfe8a3fd4cf289c411b76cc53f415baa",
|
||||
"line_number": 102,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic tenant-admin password used by an identity test."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
|
||||
"hashed_secret": "6809ffccad03b80fa1fbc32c17e7e054805ec30b",
|
||||
"line_number": 139,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Explicit wrong-password fixture used by a negative test."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
|
||||
"hashed_secret": "2585823c3e56d65632eff0c1eb7f8fffa0736cb3",
|
||||
"line_number": 188,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic invite password used by an identity test."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
|
||||
"hashed_secret": "d26b0b74aaf44561a94d607e9d73e4dc6b95fe3d",
|
||||
"line_number": 241,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic tenant-owner password used by an identity test."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
|
||||
"hashed_secret": "42f6c37f356183f42a67d9e0ae515bb51d7590cf",
|
||||
"line_number": 280,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic old-password fixture used by a reset test."
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
|
||||
"hashed_secret": "a55a3986a699ba4d2b29b2057811322bf076abd0",
|
||||
"line_number": 299,
|
||||
"is_secret": false,
|
||||
"audit_reason": "Synthetic new-password fixture used by a reset test."
|
||||
}
|
||||
],
|
||||
"yuqei-infra/compose/.env.example": [
|
||||
{
|
||||
"type": "Basic Auth Credentials",
|
||||
|
||||
Reference in New Issue
Block a user