hello-stephen opened a new pull request, #66367:
URL: https://github.com/apache/doris/pull/66367
### What problem does this PR solve?
Issue Number: None
Related PR: #65609
Problem Summary: The `generic-api-key` rule treats random-string fixtures in
four generated regression result files as credentials when unrelated
floating-point formatting changes rewrite their very long lines. PR #65609
therefore reports 11 Gitleaks findings even though every detected candidate
already exists in its parent commit.
This change adds a rule-level allowlist scoped by both:
- the four exact generated `.out` paths that triggered the false positives;
and
- the fixed synthetic random-string shape used by those fixtures.
It does not disable `generic-api-key` and does not allowlist the broader
regression data tree.
### Release note
None
### Check List (For Author)
- Test: Manual test
- Replayed Gitleaks v8.30.0 on `0dde2739..48239854`: 11 findings before
the change, 0 after.
- Confirmed a generic credential positive control is still detected.
- Scanned this PR commit with Gitleaks v8.30.0: 0 findings.
- Behavior changed: No
- Does this need documentation: No
Failed job being addressed:
https://github.com/apache/doris/actions/runs/30459616022/job/90601962857
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
