Repository navigation
Expand file tree
/
Copy path.gitleaksignore
More file actions
157 lines (139 loc) · 15 KB
/
Copy path.gitleaksignore
File metadata and controls
157 lines (139 loc) · 15 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
# Gitleaks ignore file
# Add fingerprints of known false positives here (one per line)
# Get fingerprints from gitleaks output when a false positive is detected
#
# Example: abc123def456...
# Synthetic relay error-redaction hash: a hexadecimal sequence repeated four times.
# The repository-wide history scan includes this test fixture from another branch.
304b9550dd8068d26189384051c8d0b1e05576ce:ods/extensions/services/pixel-model-relay/tests/test_relay.py:generic-api-key:77
# Test fixtures in privacy-shield PII scrubber tests (not real secrets)
bc47367431025198fcbea19a54abcde8c30847fd:ods/extensions/services/privacy-shield/tests/test_pii_scrubber.py:generic-api-key:125
bc47367431025198fcbea19a54abcde8c30847fd:ods/extensions/services/privacy-shield/tests/test_pii_scrubber.py:generic-api-key:131
bc47367431025198fcbea19a54abcde8c30847fd:ods/extensions/services/privacy-shield/tests/test_pii_scrubber.py:generic-api-key:181
# Documentation examples (placeholder API keys in curl commands)
4ba4a3779264f44b247af06fbad391c1f4d38269:ods/extensions/services/litellm/README.md:curl-auth-header:89
9a1e87ce94083fb9696ec1df6c926ec77397b38e:ods/extensions/library/workflows/comfyui/README.md:curl-auth-header:32
9a1e87ce94083fb9696ec1df6c926ec77397b38e:ods/extensions/library/workflows/comfyui/README.md:curl-auth-header:64
9a1e87ce94083fb9696ec1df6c926ec77397b38e:ods/extensions/library/workflows/langflow/README.md:curl-auth-header:30
9a1e87ce94083fb9696ec1df6c926ec77397b38e:ods/extensions/library/workflows/flowise/README.md:curl-auth-header:30
1f9e6dae1a91ff274dac2f580996ae9f8d60f414:ods/extensions/library/workflows/flowise/README.md:curl-auth-header:30
1f9e6dae1a91ff274dac2f580996ae9f8d60f414:ods/extensions/library/workflows/comfyui/README.md:curl-auth-header:32
1f9e6dae1a91ff274dac2f580996ae9f8d60f414:ods/extensions/library/workflows/comfyui/README.md:curl-auth-header:64
1f9e6dae1a91ff274dac2f580996ae9f8d60f414:ods/extensions/library/workflows/langflow/README.md:curl-auth-header:30
# Example code in privacy shield implementation (test patterns)
6a5047fd3f7cc0369416d14289740b8c3f02dd06:ods/privacy-shield-offline/pii_scrubber.py:generic-api-key:146
6a5047fd3f7cc0369416d14289740b8c3f02dd06:ods/privacy-shield/pii_scrubber.py:generic-api-key:149
# Security audit documentation (example vulnerabilities for demonstration)
ce863df7a784f4d2406bf2c151e9c5c497b3d085:SECURITY_AUDIT.md:generic-api-key:31
ce863df7a784f4d2406bf2c151e9c5c497b3d085:SECURITY_AUDIT.md:generic-api-key:32
ce863df7a784f4d2406bf2c151e9c5c497b3d085:SECURITY_AUDIT.md:generic-api-key:59
# Archive/cookbook examples (historical test code and documentation)
b21a7e1cf78cb925a8b0fe2d3819890c8a0e5751:archive/cookbook/android-labs/cookbooks/agent-template-writing.md:generic-api-key:383
b21a7e1cf78cb925a8b0fe2d3819890c8a0e5751:archive/cookbook/android-labs/products/privacy-shield/test_shield.py:generic-api-key:34
b21a7e1cf78cb925a8b0fe2d3819890c8a0e5751:archive/cookbook/android-labs/products/privacy-shield/test_shield.py:generic-api-key:157
b21a7e1cf78cb925a8b0fe2d3819890c8a0e5751:archive/cookbook/android-labs/products/privacy-shield/test_shield.py:jwt:63
b21a7e1cf78cb925a8b0fe2d3819890c8a0e5751:archive/cookbook/android-labs/docs/LIVEKIT-DEPLOYMENT-GUIDE.md:curl-auth-header:373
b21a7e1cf78cb925a8b0fe2d3819890c8a0e5751:archive/cookbook/voice-agent-framework/core/hvac-token-server.py:generic-api-key:19
b21a7e1cf78cb925a8b0fe2d3819890c8a0e5751:archive/cookbook/voice-agent-framework/core/hvac-token-server.py:generic-api-key:20
76fc9f43ea8612dd50344a53b69b43b7eb650e04:archive/cookbook/android-labs/docs/LIVEKIT-DEPLOYMENT-GUIDE.md:curl-auth-header:373
76fc9f43ea8612dd50344a53b69b43b7eb650e04:archive/cookbook/android-labs/cookbooks/agent-template-writing.md:generic-api-key:383
76fc9f43ea8612dd50344a53b69b43b7eb650e04:archive/cookbook/android-labs/products/privacy-shield/test_shield.py:generic-api-key:34
76fc9f43ea8612dd50344a53b69b43b7eb650e04:archive/cookbook/android-labs/products/privacy-shield/test_shield.py:generic-api-key:157
76fc9f43ea8612dd50344a53b69b43b7eb650e04:archive/cookbook/android-labs/products/privacy-shield/test_shield.py:jwt:63
a3b26dbd450fd0dc5d0651ffa6f21fe20acb1195:archive/cookbook/voice-agent-framework/core/hvac-token-server.py:generic-api-key:19
a3b26dbd450fd0dc5d0651ffa6f21fe20acb1195:archive/cookbook/voice-agent-framework/core/hvac-token-server.py:generic-api-key:20
# Installer-generated placeholder values (replaced during installation)
9539512e06bef98b9276e339ef3cb2d6273e8f1f:ods/installers/macos/lib/env-generator.sh:generic-api-key:80
5c5151fe050ac570fb022ccb99d86bda93dfedb2:ods/installers/windows/lib/env-generator.ps1:generic-api-key:115
# Configuration examples (default/placeholder values)
48a1d87d3d155359fb23d7a65d1db55b036b7508:ods/config/searxng/settings.yml:generic-api-key:3
# Default-rule restoration review, 2026-09-24. Exact commit/path/rule/line only.
# JDBC database URL without a password; credentials are separate required environment inputs.
1d6038ef9679b89632f5fa4765ad1d6347786711:ods/extensions/library/services/keycloak/compose.yaml:generic-api-key:19
# Descriptive broker-owned cache policy, not a cache value or credential.
1d6038ef9679b89632f5fa4765ad1d6347786711:ods/vendor/pixel/RELEASE-MANIFEST.json:generic-api-key:306
# Public npm artifact SHA-256 misidentified as a Discord token.
1d6038ef9679b89632f5fa4765ad1d6347786711:ods/vendor/pixel/scripts/generated/release.env:discord-api-token:17
# Reviewed synthetic test/evaluation inputs or PII-scrubber demonstration text; no issued credential.
0fba8b3cd452afa3575128e427f989d90e15e142:dream-server/extensions/services/ape/tests/conftest.py:generic-api-key:19
1d6038ef9679b89632f5fa4765ad1d6347786711:ods/vendor/pixel/security-evals/agent-comparison/task-battery-v1.json:generic-api-key:179
1d6038ef9679b89632f5fa4765ad1d6347786711:ods/vendor/pixel/tests/test_frontier_broker.py:generic-api-key:1309
1d6038ef9679b89632f5fa4765ad1d6347786711:ods/vendor/pixel/tests/test_mesh_peer.py:generic-api-key:2879
1d6038ef9679b89632f5fa4765ad1d6347786711:ods/vendor/pixel/tests/test_ops_broker.py:curl-auth-header:177
1d6038ef9679b89632f5fa4765ad1d6347786711:ods/vendor/pixel/tests/test_source_audit.py:generic-api-key:178
1f9e6dae1a91ff274dac2f580996ae9f8d60f414:resources/dev/extensions-library/services/privacy_shield/pii_scrubber.py:generic-api-key:149
39164d8c5bc3306dd4e7ac3e884dcc8574b9930a:ods/tests/test-perplexica-entrypoint.py:generic-api-key:203
4b257f2ee04bd6aa4f0ec9ae98a5daee4a0dffcf:ods/extensions/services/model-router/tests/test_router.py:generic-api-key:946
676dc575c623a32114b77d1f9c4e3252111dd673:dream-server/extensions/services/dreamforge/rust/crates/runtime/src/secret_scanner.rs:jwt:200
6a5047fd3f7cc0369416d14289740b8c3f02dd06:dream-server/privacy-shield-offline/pii_scrubber.py:generic-api-key:146
6a5047fd3f7cc0369416d14289740b8c3f02dd06:dream-server/privacy-shield/pii_scrubber.py:generic-api-key:149
7963d4f799873c32756e06483022bb4d766f753b:ods/extensions/services/model-router/tests/test_router.py:generic-api-key:343
9a1e87ce94083fb9696ec1df6c926ec77397b38e:resources/dev/extensions-library/services/privacy_shield/pii_scrubber.py:generic-api-key:149
bc47367431025198fcbea19a54abcde8c30847fd:dream-server/extensions/services/privacy-shield/tests/test_pii_scrubber.py:generic-api-key:125
bc47367431025198fcbea19a54abcde8c30847fd:dream-server/extensions/services/privacy-shield/tests/test_pii_scrubber.py:generic-api-key:131
bc47367431025198fcbea19a54abcde8c30847fd:dream-server/extensions/services/privacy-shield/tests/test_pii_scrubber.py:generic-api-key:181
ef5f6e60cad0bce05a965811d6dc59bfaf217649:ods/tests/pixel_inference/test_advice_process.py:generic-api-key:100
# Browser localStorage names, not authentication credentials.
24c8b714a4fa1eb022b9c5ff5a4e1109c29ef630:ods/extensions/services/dashboard/src/lib/pixelConversationWriter.test.js:generic-api-key:31
54292586f9da910e6a3e3121781a317f69e864cc:ods/extensions/services/dashboard/src/components/PixelCommandSearch.test.jsx:generic-api-key:56
5ed81190fb88e545fdc138b726f62279b6cc0ae4:ods/extensions/services/dashboard/src/lib/pixelConversations.js:generic-api-key:2
bb21a9cf1fb2df67dfac195f721662f57fd230b4:ods/extensions/services/dashboard/src/pages/Pixel.legacy-history.test.jsx:generic-api-key:6
bdd6f35727c2beb44f3952491cc57e7a07d3ded9:ods/extensions/services/dashboard/src/lib/pixelConversations.test.js:generic-api-key:11
bdd6f35727c2beb44f3952491cc57e7a07d3ded9:ods/extensions/services/dashboard/src/lib/pixelConversations.test.js:generic-api-key:43
c611570c493ca448bd08a45c936dd5e03ccffc86:ods/extensions/services/dashboard/src/lib/pixelSavedPrompts.js:generic-api-key:1
# Literal placeholder curl headers in documentation examples.
1f9e6dae1a91ff274dac2f580996ae9f8d60f414:resources/dev/extensions-library/workflows/comfyui/README.md:curl-auth-header:32
1f9e6dae1a91ff274dac2f580996ae9f8d60f414:resources/dev/extensions-library/workflows/comfyui/README.md:curl-auth-header:64
1f9e6dae1a91ff274dac2f580996ae9f8d60f414:resources/dev/extensions-library/workflows/flowise/README.md:curl-auth-header:30
1f9e6dae1a91ff274dac2f580996ae9f8d60f414:resources/dev/extensions-library/workflows/langflow/README.md:curl-auth-header:30
4ba4a3779264f44b247af06fbad391c1f4d38269:dream-server/extensions/services/litellm/README.md:curl-auth-header:89
9a1e87ce94083fb9696ec1df6c926ec77397b38e:resources/dev/extensions-library/workflows/comfyui/README.md:curl-auth-header:32
9a1e87ce94083fb9696ec1df6c926ec77397b38e:resources/dev/extensions-library/workflows/comfyui/README.md:curl-auth-header:64
9a1e87ce94083fb9696ec1df6c926ec77397b38e:resources/dev/extensions-library/workflows/flowise/README.md:curl-auth-header:30
9a1e87ce94083fb9696ec1df6c926ec77397b38e:resources/dev/extensions-library/workflows/langflow/README.md:curl-auth-header:30
dd97e51445ea4d01fd6f291ce384e46988d1d584:resources/dev/extensions-library/services/gitea/README.md:curl-auth-header:36
# Empty cloud-key declarations matched across the preceding Cloud API Keys comment.
5c5151fe050ac570fb022ccb99d86bda93dfedb2:dream-server/installers/windows/lib/env-generator.ps1:generic-api-key:115
9539512e06bef98b9276e339ef3cb2d6273e8f1f:dream-server/installers/macos/lib/env-generator.sh:generic-api-key:80
# Previously published SearXNG default at this historical commit only; never reuse it. See ods/docs/SECRET-SCANNING.md.
48a1d87d3d155359fb23d7a65d1db55b036b7508:dream-server/config/searxng/settings.yml:generic-api-key:3
# Additional remote-branch history: reviewed vendor fixtures/JDBC URL,
# Python planning-field set names, and a synthetic provenance test input.
0c3a3c0b0c432a71cd5701e8d749e99d6ed2fd0f:ods/extensions/services/dashboard-api/extension_planning_contract.py:generic-api-key:33
0c3a3c0b0c432a71cd5701e8d749e99d6ed2fd0f:ods/extensions/services/dashboard-api/extension_planning_contract.py:generic-api-key:51
4f9fc03cfb36597f530213ef79187ee2977810c1:ods/extensions/services/dashboard-api/extension_planning_contract.py:generic-api-key:31
4f9fc03cfb36597f530213ef79187ee2977810c1:ods/extensions/services/dashboard-api/tests/test_plan_provenance.py:generic-api-key:564
5584c90c3e5d49d8f929e8eeec09e80aa6b0c259:ods/extensions/library/services/keycloak/compose.yaml:generic-api-key:19
83a95d8e0f465a541306ae5f5512b50dab3a645a:ods/extensions/services/dashboard-api/extension_planning_contract.py:generic-api-key:32
83a95d8e0f465a541306ae5f5512b50dab3a645a:ods/extensions/services/dashboard-api/extension_planning_contract.py:generic-api-key:33
83a95d8e0f465a541306ae5f5512b50dab3a645a:ods/extensions/services/dashboard-api/extension_planning_contract.py:generic-api-key:49
8419eeb051615046f7129013e95551763a3c01b2:ods/vendor/pixel/RELEASE-MANIFEST.json:generic-api-key:306
8419eeb051615046f7129013e95551763a3c01b2:ods/vendor/pixel/scripts/generated/release.env:discord-api-token:17
8419eeb051615046f7129013e95551763a3c01b2:ods/vendor/pixel/security-evals/agent-comparison/task-battery-v1.json:generic-api-key:179
8419eeb051615046f7129013e95551763a3c01b2:ods/vendor/pixel/tests/test_frontier_broker.py:generic-api-key:1309
8419eeb051615046f7129013e95551763a3c01b2:ods/vendor/pixel/tests/test_mesh_peer.py:generic-api-key:2879
8419eeb051615046f7129013e95551763a3c01b2:ods/vendor/pixel/tests/test_ops_broker.py:curl-auth-header:177
8419eeb051615046f7129013e95551763a3c01b2:ods/vendor/pixel/tests/test_source_audit.py:generic-api-key:178
e31fc3e4ccaedb327ce52c34b0a8eb8815b6d5a0:ods/extensions/services/dashboard-api/routers/extension_planning.py:generic-api-key:40
# Synthetic probe fixture in separately fetched history: literal UUID plus repeated a/b characters.
150dde5caf44cc7b85f79413757dfc466521cc10:ods/extensions/services/pixel-model-relay/tests/test_relay.py:generic-api-key:38
# Reviewed synthetic redaction fixtures: patterned dummy keys, public example JWT, and truncated nonfunctional PEM; exact historical fingerprints only.
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:gcp-api-key:63
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:jwt:24
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:private-key:64
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:generic-api-key:31
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:generic-api-key:41
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:generic-api-key:42
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:generic-api-key:59
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:generic-api-key:127
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:generic-api-key:144
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:generic-api-key:162
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:generic-api-key:198
26a4fdaa3f3c46a6fb34eee624f8e1552490683a:ods/extensions/services/dashboard-api/tests/test_host_agent_output_redaction.py:generic-api-key:208
# Reviewed synthetic loopback key in the HTTP deadline test; not a credential.
ee6593ce2d9fd4acbf92000adc3edff2a9ccdf04:ods/tests/pixel_settings/test_host_body_deadline.py:generic-api-key:22
# Historical localStorage namespaces in Portal persistence tests, not credentials; exact fingerprints only.
a4b35b934c2f627d844dfa6a6b7dbd26ea2fbc9b:ods/extensions/services/dashboard/src/pages/Pixel.persistence-ownership.test.jsx:generic-api-key:7
a4b35b934c2f627d844dfa6a6b7dbd26ea2fbc9b:ods/extensions/services/dashboard/src/lib/pixelConversationPersistence.test.js:generic-api-key:12
# Synthetic key digest in the model relay's key-echo redaction test; not a credential.
304b9550dd8068d26189384051c8d0b1e05576ce:ods/extensions/services/pixel-model-relay/tests/test_relay.py:generic-api-key:77