This is an automated email from the ASF dual-hosted git repository.
hello-stephen pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/master by this push:
new b944e5203c9 [fix](build) Allow deterministic UUID fixture in Gitleaks
(#68517)
b944e5203c9 is described below
commit b944e5203c923e32f4de8626da96b8fffad18bc5
Author: Dongyang Li <[email protected]>
AuthorDate: Tue Sep 29 11:29:06 2026 +0800
[fix](build) Allow deterministic UUID fixture in Gitleaks (#68517)
Related PR: #67627
Problem Summary: Gitleaks 8.30.0 reports the deterministic UUID map
golden output as 33 generic API keys. This change adds a rule-scoped
allowlist that requires both the exact regression output path and the
exact UUID match, preserving detection for every other file and value.
---
.gitleaks.toml | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/.gitleaks.toml b/.gitleaks.toml
index 760bb211194..21d147423df 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -30,6 +30,13 @@ condition = "AND"
regexTarget = "match"
regexes = ['''__DORIS_[A-Z0-9_]+_COL__''']
+[[rules.allowlists]]
+description = "Ignore a deterministic UUID map fixture; this test value is not
a credential"
+condition = "AND"
+regexTarget = "match"
+paths =
['''^regression-test/data/datatype_p0/uuid/test_uuid_map_matrix\.out$''']
+regexes = ['''key":"018f0f59-1010-7abc-9234-001122334455"''']
+
[[rules.allowlists]]
description = "Ignore the fake OIDC token fixture in AuthenticatorManagerTest"
condition = "AND"
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
