chore(security): harden public secret scan and document policy

This commit is contained in:
igor04091968
2026-06-21 14:17:05 +03:00
parent 9f3278f0dc
commit 4f90aba2a1
15 changed files with 389 additions and 61 deletions
+4 -4
View File
@@ -11609,7 +11609,7 @@ mod tests {
json_smoke: false,
evidence_only: false,
evidence_upload_token: None,
telemetry_api_key: "test-key".to_string(),
telemetry_api_key: "dummy".to_string(),
telemetry_store_path: dir.path().join("telemetry.jsonl"),
expected_nodes_path: dir.path().join("expected_nodes.json"),
security_events_backend: "disabled".to_string(),
@@ -11725,7 +11725,7 @@ mod tests {
json_smoke: false,
evidence_only: false,
evidence_upload_token: None,
telemetry_api_key: "test-key".to_string(),
telemetry_api_key: "dummy".to_string(),
telemetry_store_path: dir.path().join("telemetry.jsonl"),
expected_nodes_path: dir.path().join("expected_nodes.json"),
security_events_backend: "disabled".to_string(),
@@ -11804,7 +11804,7 @@ mod tests {
json_smoke: false,
evidence_only: false,
evidence_upload_token: None,
telemetry_api_key: "test-key".to_string(),
telemetry_api_key: "dummy".to_string(),
telemetry_store_path: dir.path().join("telemetry/telemetry.jsonl"),
expected_nodes_path: dir.path().join("expected_nodes.json"),
security_events_backend: "disabled".to_string(),
@@ -12474,7 +12474,7 @@ mod tests {
json_smoke: false,
evidence_only: false,
evidence_upload_token: None,
telemetry_api_key: "test-key".to_string(),
telemetry_api_key: "dummy".to_string(),
telemetry_store_path: case_dir.path().join("telemetry.jsonl"),
expected_nodes_path: case_dir.path().join("expected_nodes.json"),
security_events_backend: "disabled".to_string(),
@@ -239,7 +239,7 @@ mod tests {
json_smoke: false,
evidence_only: false,
evidence_upload_token: None,
telemetry_api_key: "test-key".to_string(),
telemetry_api_key: "dummy".to_string(),
telemetry_store_path: dir.join("telemetry.jsonl"),
expected_nodes_path: dir.join("expected_nodes.json"),
security_events_backend: "disabled".to_string(),
@@ -1045,7 +1045,7 @@ mod tests {
assert!(err.contains("AW_DLP_INFLUX_URL"));
config.influx_url = "http://influxdb.internal:8086".to_string();
config.influx_token = "prod-write-token-value".to_string();
config.influx_token = "dummy".to_string();
let err = validate_runtime_config(&config).unwrap_err().to_string();
assert!(err.contains("AW_DLP_INFLUX_HOSTS"));
@@ -1031,7 +1031,7 @@ mod tests {
assert!(err.contains("AW_WORKTIME_INFLUX_URL"));
config.influx_url = "http://influxdb.internal:8086".to_string();
config.influx_token = "prod-write-token-value".to_string();
config.influx_token = "dummy".to_string();
let err = validate_runtime_config(&config).unwrap_err().to_string();
assert!(err.contains("AW_WORKTIME_INFLUX_HOSTS"));