From eabda6e3a40186fb7e700e6bdf518418863a52dc Mon Sep 17 00:00:00 2001
From: Vincent Koc <vincentkoc@ieee.org>
Date: Sun, 8 Mar 2026 18:13:35 -0700
Subject: [PATCH] fix(tests): correct security check failure

---
 .secrets.baseline           | 8 ++++----
 src/secrets/runtime.test.ts | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.secrets.baseline b/.secrets.baseline
index 2f794ecc01b..4f591aa13ef 100644
--- a/.secrets.baseline
+++ b/.secrets.baseline
@@ -227,7 +227,7 @@
         "filename": "apps/macos/Sources/OpenClawProtocol/GatewayModels.swift",
         "hashed_secret": "7990585255d25249fb1e6eac3d2bd6c37429b2cd",
         "is_verified": false,
-        "line_number": 1749
+        "line_number": 1763
       }
     ],
     "apps/macos/Tests/OpenClawIPCTests/AnthropicAuthResolverTests.swift": [
@@ -288,7 +288,7 @@
         "filename": "apps/shared/OpenClawKit/Sources/OpenClawProtocol/GatewayModels.swift",
         "hashed_secret": "7990585255d25249fb1e6eac3d2bd6c37429b2cd",
         "is_verified": false,
-        "line_number": 1749
+        "line_number": 1763
       }
     ],
     "docs/.i18n/zh-CN.tm.jsonl": [
@@ -11584,7 +11584,7 @@
         "filename": "src/agents/pi-embedded-runner/model.ts",
         "hashed_secret": "e774aaeac31c6272107ba89080295e277050fa7c",
         "is_verified": false,
-        "line_number": 267
+        "line_number": 279
       }
     ],
     "src/agents/pi-embedded-runner/run.overflow-compaction.mocks.shared.ts": [
@@ -13035,5 +13035,5 @@
       }
     ]
   },
-  "generated_at": "2026-03-08T20:41:38Z"
+  "generated_at": "2026-03-09T01:11:58Z"
 }
diff --git a/src/secrets/runtime.test.ts b/src/secrets/runtime.test.ts
index 02b5f84f9a6..00524153b5f 100644
--- a/src/secrets/runtime.test.ts
+++ b/src/secrets/runtime.test.ts
@@ -617,7 +617,7 @@ describe("secrets runtime snapshot", () => {
       });
       await fs.writeFile(
         secretFile,
-        `${JSON.stringify({ providers: { openai: { apiKey: "sk-file-runtime" } } }, null, 2)}\n`,
+        `${JSON.stringify({ providers: { openai: { apiKey: "sk-file-runtime" } } }, null, 2)}\n`, // pragma: allowlist secret
         { encoding: "utf8", mode: 0o600 },
       );
       await fs.writeFile(