mirror of
https://github.com/openclaw/openclaw.git
synced 2026-03-12 07:20:45 +00:00
fix(ci): harden diffs viewer request guard and secret scan baseline
This commit is contained in:
@@ -38,7 +38,7 @@ def maybe_decode_hex_keychain_secret(value)
|
||||
|
||||
# `security find-generic-password -w` can return hex when the stored secret
|
||||
# includes newlines/non-printable bytes (like PEM files).
|
||||
if decoded.include?("BEGIN PRIVATE KEY") || decoded.include?("END PRIVATE KEY")
|
||||
if decoded.include?("BEGIN PRIVATE KEY") || decoded.include?("END PRIVATE KEY") # pragma: allowlist secret
|
||||
UI.message("Decoded hex-encoded ASC key content from Keychain.")
|
||||
return decoded
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user