Skip to content

Fosec/99#1953

Open
Elaine-Krauss-TCG wants to merge 2 commits intodevelopfrom
fosec/99
Open

Fosec/99#1953
Elaine-Krauss-TCG wants to merge 2 commits intodevelopfrom
fosec/99

Conversation

@Elaine-Krauss-TCG
Copy link
Copy Markdown
Contributor

@Elaine-Krauss-TCG Elaine-Krauss-TCG commented Mar 25, 2026

Adds _key to the list of items that git secrets is flagging, and ensures that the git secrets install script can be re-run

Ticket link: https://fecgov.atlassian.net/browse/FOSEC-99

Git secrets installation instructions: https://github.com/fecgov/fecfile-web-api/wiki/Local-initial-setup#git-secrets

…res that the git secrets install script can be re-run
Comment on lines +43 to +44
git secrets --add $GLOBAL_TOKEN '(dbpasswd|dbuser|dbname|dbhost|_key|api_key|apikey|password|guid|hostname|pw).*[=:][^(?=|>|.*=>|.*>$)]'
git secrets --add $GLOBAL_TOKEN '(DBPASSWD|DBUSER|DBNAME|DBHOST|_KEY|API_KEY|APIKEY|PASSWORD|GUID|HOSTNAME|PW).*[=:][^(?=|>|.*=>|.*>$)]'
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is keeping "api_key"/"API_KEY" redundant now?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, I thought about removing it, but I didn't. Gonna go back and change that

Removes a redundant token
@lbeaufort lbeaufort self-requested a review March 26, 2026 14:04
@sonarqubecloud
Copy link
Copy Markdown

Copy link
Copy Markdown
Member

@lbeaufort lbeaufort left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This isn't catching CYPRESS_RECORD_KEY="aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee" on my local, but I'm still trying to figure out if the new script installed properly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants