From 89667e506355f1a80ab2aa0203314f10c40f6c4b Mon Sep 17 00:00:00 2001 From: Sean Kelly Date: Wed, 29 Nov 2023 10:35:43 -0600 Subject: [PATCH] No idea why GitHub Actions fails to find node1-key.pem and root-ca-key.pem So no longer treat them as part of the baseline --- .github/workflows/secrets-detection.yaml | 2 +- .secrets.baseline | 18 ------------------ 2 files changed, 1 insertion(+), 19 deletions(-) diff --git a/.github/workflows/secrets-detection.yaml b/.github/workflows/secrets-detection.yaml index 2ff1734..a9b0237 100644 --- a/.github/workflows/secrets-detection.yaml +++ b/.github/workflows/secrets-detection.yaml @@ -60,7 +60,7 @@ jobs: # if there is any difference between the known and newly detected secrets, break the build # Function to compare secrets without listing them - compare_secrets() { diff <(jq -r '.results | keys[] as $key | "\($key),\(.[$key] | .[] | .hashed_secret)"' "$1" | sort) <(jq -r '.results | keys[] as $key | "\($key),\(.[$key] | .[] | .hashed_secret)"' "$2" | sort) >/dev/stdout; } + compare_secrets() { diff <(jq -r '.results | keys[] as $key | "\($key),\(.[$key] | .[] | .hashed_secret)"' "$1" | sort) <(jq -r '.results | keys[] as $key | "\($key),\(.[$key] | .[] | .hashed_secret)"' "$2" | sort) >/dev/null; } # Check if there's any difference between the known and newly detected secrets if ! compare_secrets .secrets.baseline .secrets.new; then diff --git a/.secrets.baseline b/.secrets.baseline index 64effd7..281a8b4 100644 --- a/.secrets.baseline +++ b/.secrets.baseline @@ -146,24 +146,6 @@ "line_number": 120 } ], - "docker/certs/node1-key.pem": [ - { - "type": "Private Key", - "filename": "docker/certs/node1-key.pem", - "hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9", - "is_verified": false, - "line_number": 1 - } - ], - "docker/certs/root-ca-key.pem": [ - { - "type": "Private Key", - "filename": "docker/certs/root-ca-key.pem", - "hashed_secret": "be4fc4886bd949b369d5e092eb87494f12e57e5b", - "is_verified": false, - "line_number": 1 - } - ], "docker/default-config/application.properties": [ { "type": "Secret Keyword",