Jon Chery
df58bc25a3
---ci--- project: orca phase: 3 milestone: v0.3 status: complete requirements: covered: [REQ-022, REQ-030, REQ-032] partial: [] ---/ci--- v0.3 milestone merged to main. Includes all v0.2 work (P08-P10) that was previously on the milestone branch but not yet merged to main, plus the v0.3 completion work (iter.Seq streaming + doctor network/db). v0.2 phases included: P08 (mTLS), P09 (scheduling), P10 (security scan). v0.3 phases: P0 (pre-execution), P1 (iter.Seq streaming), P2 (doctor), P3 (final review+ship). Total: 40 requirements, all complete. No new go.mod dependencies. Full test suite passes under -race. gofmt + go vet clean.
19 lines
818 B
Go
19 lines
818 B
Go
// Package testdata contains fixtures used by the security tests.
|
|
// This file deliberately carries a G101 pattern (hardcoded
|
|
// credential) so that any gosec run that doesn't allowlist this
|
|
// path will fail. The allowlist lives in .golangci.yml and
|
|
// .gitleaks.toml. Removing this fixture will break the
|
|
// TestHardcodedCredsFixturePresent meta-test.
|
|
package testdata
|
|
|
|
// HardcodedCredsFixture is a stub function whose body carries a
|
|
// G101 pattern. gosec (with severity=high and confidence=medium,
|
|
// per .golangci.yml) flags `apiKey := "..."` as G101. The value
|
|
// is intentionally not a real secret (just the literal prefix
|
|
// "GOSEC_G101_FIXTURE_VALUE_") so it doesn't trigger gitleaks.
|
|
func HardcodedCredsFixture() string {
|
|
apiKey := "GOSEC_G101_FIXTURE_VALUE_NOT_A_REAL_SECRET"
|
|
_ = apiKey
|
|
return apiKey
|
|
}
|