Skip to content

Commit 0959662

Browse files
authored
fix: regenerate secrets baseline (#15)
## Summary - Regenerated `.secrets.baseline` with all 27 detect-secrets plugins - Previous baseline had empty `plugins_used` and 0 results (corrupt) - New baseline correctly detects 6 placeholder/template secret keywords in README.md, config_template.json, and systemd/install.sh ## Test plan - [x] Verified baseline parses as valid JSON - [x] Confirmed 27 plugins loaded - [x] Confirmed 6 detected results are all template placeholders, no real secrets <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Updated secrets detection baseline configuration from version 1.4.0 to 1.5.0 * Enhanced detector plugins with expanded coverage including entropy, token, key, and credential detection capabilities * Improved filtering mechanisms with multiple heuristic filters for refined detection accuracy * Added timestamp tracking for baseline generation <!-- end of auto-generated comment: release notes by coderabbit.ai -->
1 parent 6690b0a commit 0959662

1 file changed

Lines changed: 174 additions & 4 deletions

File tree

.secrets.baseline

Lines changed: 174 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,176 @@
11
{
2-
"version": "1.4.0",
3-
"plugins_used": [],
4-
"filters_used": [],
5-
"results": {}
2+
"version": "1.5.0",
3+
"plugins_used": [
4+
{
5+
"name": "ArtifactoryDetector"
6+
},
7+
{
8+
"name": "AWSKeyDetector"
9+
},
10+
{
11+
"name": "AzureStorageKeyDetector"
12+
},
13+
{
14+
"name": "Base64HighEntropyString",
15+
"limit": 4.5
16+
},
17+
{
18+
"name": "BasicAuthDetector"
19+
},
20+
{
21+
"name": "CloudantDetector"
22+
},
23+
{
24+
"name": "DiscordBotTokenDetector"
25+
},
26+
{
27+
"name": "GitHubTokenDetector"
28+
},
29+
{
30+
"name": "GitLabTokenDetector"
31+
},
32+
{
33+
"name": "HexHighEntropyString",
34+
"limit": 3.0
35+
},
36+
{
37+
"name": "IbmCloudIamDetector"
38+
},
39+
{
40+
"name": "IbmCosHmacDetector"
41+
},
42+
{
43+
"name": "IPPublicDetector"
44+
},
45+
{
46+
"name": "JwtTokenDetector"
47+
},
48+
{
49+
"name": "KeywordDetector",
50+
"keyword_exclude": ""
51+
},
52+
{
53+
"name": "MailchimpDetector"
54+
},
55+
{
56+
"name": "NpmDetector"
57+
},
58+
{
59+
"name": "OpenAIDetector"
60+
},
61+
{
62+
"name": "PrivateKeyDetector"
63+
},
64+
{
65+
"name": "PypiTokenDetector"
66+
},
67+
{
68+
"name": "SendGridDetector"
69+
},
70+
{
71+
"name": "SlackDetector"
72+
},
73+
{
74+
"name": "SoftlayerDetector"
75+
},
76+
{
77+
"name": "SquareOAuthDetector"
78+
},
79+
{
80+
"name": "StripeDetector"
81+
},
82+
{
83+
"name": "TelegramBotTokenDetector"
84+
},
85+
{
86+
"name": "TwilioKeyDetector"
87+
}
88+
],
89+
"filters_used": [
90+
{
91+
"path": "detect_secrets.filters.allowlist.is_line_allowlisted"
92+
},
93+
{
94+
"path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
95+
"min_level": 2
96+
},
97+
{
98+
"path": "detect_secrets.filters.heuristic.is_indirect_reference"
99+
},
100+
{
101+
"path": "detect_secrets.filters.heuristic.is_likely_id_string"
102+
},
103+
{
104+
"path": "detect_secrets.filters.heuristic.is_lock_file"
105+
},
106+
{
107+
"path": "detect_secrets.filters.heuristic.is_not_alphanumeric_string"
108+
},
109+
{
110+
"path": "detect_secrets.filters.heuristic.is_potential_uuid"
111+
},
112+
{
113+
"path": "detect_secrets.filters.heuristic.is_prefixed_with_dollar_sign"
114+
},
115+
{
116+
"path": "detect_secrets.filters.heuristic.is_sequential_string"
117+
},
118+
{
119+
"path": "detect_secrets.filters.heuristic.is_swagger_file"
120+
},
121+
{
122+
"path": "detect_secrets.filters.heuristic.is_templated_secret"
123+
}
124+
],
125+
"results": {
126+
"README.md": [
127+
{
128+
"type": "Secret Keyword",
129+
"filename": "README.md",
130+
"hashed_secret": "4828aeee87a0527949cb106d4c50ae10fd333cef",
131+
"is_verified": false,
132+
"line_number": 74
133+
},
134+
{
135+
"type": "Secret Keyword",
136+
"filename": "README.md",
137+
"hashed_secret": "182f59c3b9f62e577aa1cf16f878a4e38633a578",
138+
"is_verified": false,
139+
"line_number": 76
140+
}
141+
],
142+
"config_template.json": [
143+
{
144+
"type": "Secret Keyword",
145+
"filename": "config_template.json",
146+
"hashed_secret": "055bb55ead1ad799af50f569f42c6429ec303bda",
147+
"is_verified": false,
148+
"line_number": 8
149+
},
150+
{
151+
"type": "Secret Keyword",
152+
"filename": "config_template.json",
153+
"hashed_secret": "182f59c3b9f62e577aa1cf16f878a4e38633a578",
154+
"is_verified": false,
155+
"line_number": 10
156+
}
157+
],
158+
"systemd/install.sh": [
159+
{
160+
"type": "Secret Keyword",
161+
"filename": "systemd/install.sh",
162+
"hashed_secret": "0d1ba0da3e84e54f29846c93c43182eede365858",
163+
"is_verified": false,
164+
"line_number": 59
165+
},
166+
{
167+
"type": "Secret Keyword",
168+
"filename": "systemd/install.sh",
169+
"hashed_secret": "35c06bbf283af9520aff4b772d12f278e3cae8d4",
170+
"is_verified": false,
171+
"line_number": 61
172+
}
173+
]
174+
},
175+
"generated_at": "2026-03-07T02:13:28Z"
6176
}

0 commit comments

Comments
 (0)