mirror of
https://github.com/openclaw/openclaw.git
synced 2026-03-12 07:20:45 +00:00
Secrets: add inline allowlist review set (#38314)
* Secrets: add inline allowlist review set * Secrets: narrow detect-secrets file exclusions * Secrets: exclude Docker fingerprint false positive * Secrets: allowlist test and docs false positives * Secrets: refresh baseline after allowlist updates * Secrets: fix gateway chat fixture pragma * Secrets: format pre-commit config * Android: keep talk mode fixture JSON valid * Feishu: rely on client timeout injection * Secrets: allowlist provider auth test fixtures * Secrets: allowlist onboard search fixtures * Secrets: allowlist onboard mode fixture * Secrets: allowlist gateway auth mode fixture * Secrets: allowlist APNS wake test key * Secrets: allowlist gateway reload fixtures * Secrets: allowlist moonshot video fixture * Secrets: allowlist auto audio fixture * Secrets: allowlist tiny audio fixture * Secrets: allowlist embeddings fixtures * Secrets: allowlist resolve fixtures * Secrets: allowlist target registry pattern fixtures * Secrets: allowlist gateway chat env fixture * Secrets: refresh baseline after fixture allowlists * Secrets: reapply gateway chat env allowlist * Secrets: reapply gateway chat env allowlist * Secrets: stabilize gateway chat env allowlist * Secrets: allowlist runtime snapshot save fixture * Secrets: allowlist oauth profile fixtures * Secrets: allowlist compaction identifier fixture * Secrets: allowlist model auth fixture * Secrets: allowlist model status fixtures * Secrets: allowlist custom onboarding fixture * Secrets: allowlist mattermost token summary fixtures * Secrets: allowlist gateway auth suite fixtures * Secrets: allowlist channel summary fixture * Secrets: allowlist provider usage auth fixtures * Secrets: allowlist media proxy fixture * Secrets: allowlist secrets audit fixtures * Secrets: refresh baseline after final fixture allowlists * Feishu: prefer explicit client timeout * Feishu: test direct timeout precedence
This commit is contained in:
@@ -141,7 +141,8 @@
|
||||
"\"gateway\\.auth\\.password\"",
|
||||
"\"talk\\.apiKey\"",
|
||||
"=== \"string\"",
|
||||
"typeof remote\\?\\.password === \"string\""
|
||||
"typeof remote\\?\\.password === \"string\"",
|
||||
"OPENCLAW_DOCKER_GPG_FINGERPRINT="
|
||||
]
|
||||
}
|
||||
],
|
||||
@@ -152,14 +153,14 @@
|
||||
"filename": ".detect-secrets.cfg",
|
||||
"hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9",
|
||||
"is_verified": false,
|
||||
"line_number": 17
|
||||
"line_number": 13
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": ".detect-secrets.cfg",
|
||||
"hashed_secret": "fe88fceb47e040ba1bfafa4ac639366188df2f6d",
|
||||
"is_verified": false,
|
||||
"line_number": 19
|
||||
"line_number": 15
|
||||
}
|
||||
],
|
||||
"appcast.xml": [
|
||||
@@ -12387,21 +12388,14 @@
|
||||
"filename": "src/config/schema.help.ts",
|
||||
"hashed_secret": "9f4cda226d3868676ac7f86f59e4190eb94bd208",
|
||||
"is_verified": false,
|
||||
"line_number": 109
|
||||
"line_number": 647
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "src/config/schema.help.ts",
|
||||
"hashed_secret": "01822c8bbf6a8b136944b14182cb885100ec2eae",
|
||||
"is_verified": false,
|
||||
"line_number": 130
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "src/config/schema.help.ts",
|
||||
"hashed_secret": "bb7dfd9746e660e4a4374951ec5938ef0e343255",
|
||||
"is_verified": false,
|
||||
"line_number": 187
|
||||
"line_number": 678
|
||||
}
|
||||
],
|
||||
"src/config/schema.irc.ts": [
|
||||
@@ -12720,21 +12714,21 @@
|
||||
"filename": "src/infra/provider-usage.auth.normalizes-keys.test.ts",
|
||||
"hashed_secret": "45c7365e3b542cdb4fae6ec10c2ff149224d7656",
|
||||
"is_verified": false,
|
||||
"line_number": 80
|
||||
"line_number": 123
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "src/infra/provider-usage.auth.normalizes-keys.test.ts",
|
||||
"hashed_secret": "b67074884ab7ef7c7a8cd6a3da9565d96c792248",
|
||||
"is_verified": false,
|
||||
"line_number": 81
|
||||
"line_number": 124
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "src/infra/provider-usage.auth.normalizes-keys.test.ts",
|
||||
"hashed_secret": "d4d8027e64f9cf4180d3aecfe31ea409368022ee",
|
||||
"is_verified": false,
|
||||
"line_number": 82
|
||||
"line_number": 125
|
||||
}
|
||||
],
|
||||
"src/infra/shell-env.test.ts": [
|
||||
@@ -12900,7 +12894,7 @@
|
||||
"filename": "src/media-understanding/runner.auto-audio.test.ts",
|
||||
"hashed_secret": "3acfb2c2b433c0ea7ff107e33df91b18e52f960f",
|
||||
"is_verified": false,
|
||||
"line_number": 40
|
||||
"line_number": 23
|
||||
}
|
||||
],
|
||||
"src/media-understanding/runner.deepgram.test.ts": [
|
||||
@@ -12934,21 +12928,21 @@
|
||||
"filename": "src/memory/embeddings.test.ts",
|
||||
"hashed_secret": "a47110e348a3063541fb1f1f640d635d457181a0",
|
||||
"is_verified": false,
|
||||
"line_number": 45
|
||||
"line_number": 47
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "src/memory/embeddings.test.ts",
|
||||
"hashed_secret": "c734e47630dda71619c696d88381f06f7511bd78",
|
||||
"is_verified": false,
|
||||
"line_number": 160
|
||||
"line_number": 195
|
||||
},
|
||||
{
|
||||
"type": "Secret Keyword",
|
||||
"filename": "src/memory/embeddings.test.ts",
|
||||
"hashed_secret": "56e1d57b8db262b08bc73c60ed08d8c92e59503f",
|
||||
"is_verified": false,
|
||||
"line_number": 189
|
||||
"line_number": 291
|
||||
}
|
||||
],
|
||||
"src/pairing/pairing-store.ts": [
|
||||
@@ -13060,7 +13054,7 @@
|
||||
"filename": "src/tui/gateway-chat.test.ts",
|
||||
"hashed_secret": "6255675480f681df08c1704b7b3cd2c49917f0e2",
|
||||
"is_verified": false,
|
||||
"line_number": 85
|
||||
"line_number": 60
|
||||
}
|
||||
],
|
||||
"src/web/login.test.ts": [
|
||||
@@ -13100,5 +13094,5 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"generated_at": "2026-02-17T13:34:38Z"
|
||||
"generated_at": "2026-03-07T00:11:03Z"
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user