Project

General

Profile

Actions
Copy link

Bug #52086

open

mgr/dashboard: generates gitleaks false positive

Added by Patrick Donnelly over 2 years ago. Updated over 2 years ago.

Status:
Triaged
Priority:
Normal
Assignee:
Avan Thakkar
Category:
Security & Auth
Target version:
Ceph - v17.0.0
% Done:

0%

Source:
Development
Tags:
Backport:
pacific,octopus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

PwndAlert generates a false positive on

https://github.com/batrick/ceph/blob/a65323b05cc2f25c4ae68e186b292b761f2aa3f0/src/pybind/mgr/dashboard/frontend/src/app/ceph/cluster/services/service-form/service-form.component.spec.ts#L263

We should add a top-level ".gitleaks.toml" file with an allowlist rule for the above file. See also

https://github.com/zricethezav/gitleaks/#rules-summary

Actions
Copy link
 #1

Updated by Ernesto Puerta over 2 years ago

  • Status changed from New to Triaged
  • Assignee set to Avan Thakkar
Actions
Copy link
 #2

Updated by Ernesto Puerta over 2 years ago

  • Category set to Security & Auth
  • Priority changed from High to Normal
Actions
Copy link

Also available in: Atom PDF