From ace64831e0b2cfdc35fa06ccf347000a55e55704 Mon Sep 17 00:00:00 2001
From: Vincent Koc <vincentkoc@ieee.org>
Date: Sat, 7 Mar 2026 16:26:16 -0800
Subject: [PATCH] Gateway Credentials: allowlist password fixtures

---
 src/gateway/credentials.test.ts | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/gateway/credentials.test.ts b/src/gateway/credentials.test.ts
index b5051ef033b..5a6ea041c92 100644
--- a/src/gateway/credentials.test.ts
+++ b/src/gateway/credentials.test.ts
@@ -125,18 +125,18 @@ describe("resolveGatewayCredentialsFromConfig", () => {
       cfg: cfg({
         gateway: {
           mode: "local",
-          auth: { token: "config-token", password: "config-password" },
+          auth: { token: "config-token", password: "config-password" }, // pragma: allowlist secret
         },
       }),
       env: {
         OPENCLAW_GATEWAY_TOKEN: "env-token",
-        OPENCLAW_GATEWAY_PASSWORD: "env-password",
+        OPENCLAW_GATEWAY_PASSWORD: "env-password", // pragma: allowlist secret
         OPENCLAW_SERVICE_KIND: "gateway",
       } as NodeJS.ProcessEnv,
     });
     expect(resolved).toEqual({
       token: "config-token",
-      password: "env-password",
+      password: "env-password", // pragma: allowlist secret
     });
   });