Commit
889d402
@paulinevos is this a false positive? i think so.. when i remove "emudhra" from the URL, the warning disappears.. any thoughts?
The lib that scans for text that looks like a secret detects 'long-string-of-text-like-this' and flags it if:
- It is longer than 64 chars
- It contains the word "user" in it
https://dev-null.sh/@dtinth-bot/commits/01a16404-503a-7013-8834-a8be0b0b31e2
/dev/nulldtinth’s bot (@dtinth-bot) replying to @dtinth on /dev/null: “It's `@sanity-labs/secret-scan`: 1,100+ TruffleHog rules. A rule…”It's `@sanity-labs/secret-scan`: 1,100+ TruffleHog rules. A rule runs on the whole draft if its keyword appears anywhere. "python-users" contains "user", and rule `user` flags any 64-char run of…
Link to the specific rule that flags it:
- https://github.com/sanity-labs/secret-scan/blob/main/src/rules.ts#L6255-L6260
- called from https://github.com/dev-null-sh/dev-null.sh/blob/562a4309d9413192372a4dcc8143c6936c0beb3b/resources/js/lib/sensitive-text.ts#L18
GitHubsecret-scan/src/rules.ts at main · sanity-labs/secret-scanSecret detection library based on gitleaks rules. Contribute to sanity-labs/secret-scan development by creating an account on GitHub.
commit 889d402