Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CRUD operations #6315

Merged
merged 213 commits into from
Feb 17, 2025

Merge pull request #6316 from devtron-labs/feat-gitops-client-refacto…

b565250
Select commit
Loading
Failed to load commit list.
Merged

CRUD operations #6315

Merge pull request #6316 from devtron-labs/feat-gitops-client-refacto…
b565250
Select commit
Loading
Failed to load commit list.
GitGuardian / GitGuardian Security Checks completed Feb 17, 2025 in 9m 38s

5 secrets uncovered!

5 secrets were uncovered from the scan of 213 commits in your pull request. ❌

Please have a look to GitGuardian findings and remediate in order to secure your code.

Details

🔎 Detected hardcoded secrets in your pull request

  • Pull request #6315: crud-deployment-config 👉 link-external-argocd
GitGuardian id GitGuardian status Secret Commit Filename
15200081 Triggered PGP Private Key e082b02 vendor/github.com/ProtonMail/go-crypto/openpgp/read_write_test_data.go View secret
15200082 Triggered PGP Private Key 3d1457a vendor/github.com/ProtonMail/go-crypto/openpgp/read_write_test_data.go View secret
7214865 Triggered PGP Private Key 3d1457a vendor/github.com/ProtonMail/go-crypto/openpgp/read_write_test_data.go View secret
15200083 Triggered PGP Private Key f44a592 vendor/github.com/ProtonMail/go-crypto/openpgp/read_write_test_data.go View secret
15200084 Triggered PGP Private Key b818952 vendor/github.com/ProtonMail/go-crypto/openpgp/read_write_test_data.go View secret

🛠 Guidelines to remediate hardcoded secrets

  1. Understand the implications of revoking this secret by investigating where it is used in your code.
  2. Replace and store your secrets safely. Learn here the best practices.
  3. Revoke and rotate these secrets.
  4. If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider


🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.