Feat/add gitleaks #337

KraMorK · 2024-09-17T10:07:45Z

Description

Why do we need it, and what problem does it solve?

Why do we need it in the patch release (if we do)?

What is the expected result?

Checklist

The code is covered by unit tests.
e2e tests passed.
Documentation updated according to the changes.
Changes were tested in the Kubernetes cluster manually.

Changelog entries

section: <kebab-case of a module name> | <1st level dir in the repo>
type: fix | feature | chore
summary: <ONE-LINE of what effectively changes for a user>
impact: <what to expect for users, possibly MULTI-LINE>, required if impact_level is high ↓
impact_level: default | high | low

github-actions · 2024-09-17T11:42:52Z

1.sh

+#!/usr/bin/env bash
+
+url="https://api.github.com"
+token="ghp_CTbv1bPL14y0TtwfPveRYS3Cred4oken"


🛑 Gitleaks has detected a secret with rule-id generic-api-key in commit 292ff99.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 292ff99850d78f6a0683263709bd73072b797468:1.sh:generic-api-key:4 >> .gitleaksignore

github-actions · 2024-09-17T11:42:53Z

id-rsa

@@ -0,0 +1,8 @@
+# Тестовый ключ для проверки gitleaks
+-----BEGIN OPENSSH PRIVATE KEY-----


🛑 Gitleaks has detected a secret with rule-id private-key in commit 292ff99.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 292ff99850d78f6a0683263709bd73072b797468:id-rsa:private-key:2 >> .gitleaksignore

github-actions · 2024-09-17T11:45:15Z

1.json

+{
+  "credentional": {
+    "user": "testuser",
+    "password": "deese0wie2tahph2mooyaiPoorie0Nah"


🛑 Gitleaks has detected a secret with rule-id generic-api-key in commit 497aac7.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 497aac7436a19a6af95dff45a5328402d66bdbcd:1.json:generic-api-key:4 >> .gitleaksignore

github-actions · 2024-09-18T07:55:01Z

1.json

+{
+  "credentional": {
+    "user": "testuser",
+    "password": "deese0wie2tahph2mooyaiPoorie0Nah"


🛑 Gitleaks has detected a secret with rule-id `` in commit 497aac7.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 497aac7436a19a6af95dff45a5328402d66bdbcd:1.json::4 >> .gitleaksignore

github-actions · 2024-09-18T07:55:02Z

2.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+var="ewogICJjcmVkZW50aW9uYWwiOiB7CiAgICAidXNlciI6ICJ0ZXN0dXNlciIsCiAgICAicGFzc3dvcmQiOiAiZGVlc2Uwd2llMnRhaHBoMm1vb3lhaVBvb3JpZTBOYWgiCiAgfQp9Cg=="


🛑 Gitleaks has detected a secret with rule-id `` in commit b4414c0.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo b4414c0b3b8bc5968766c45f3861c518bb283dd8:2.sh::3 >> .gitleaksignore

github-actions · 2024-09-18T07:55:04Z

1.sh

+#!/usr/bin/env bash
+
+url="https://api.github.com"
+token="ghp_CTbv1bPL14y0TtwfPveRYS3Cred4oken"


🛑 Gitleaks has detected a secret with rule-id `` in commit 292ff99.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 292ff99850d78f6a0683263709bd73072b797468:1.sh::4 >> .gitleaksignore

github-actions · 2024-09-18T07:55:05Z

1.sh

+  -H "Accept: application/vnd.github+json" \
+  -H "Authorization: Bearer ${token}" \
+  -H "X-GitHub-Api-Version: 2022-11-28" \
+  ${url}/repos/OWNER/REPO/pulls


🛑 Gitleaks has detected a secret with rule-id `` in commit 292ff99.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 292ff99850d78f6a0683263709bd73072b797468:1.sh::10 >> .gitleaksignore

github-actions · 2024-09-18T07:55:06Z

.github/workflow_templates/gitleaks.yml

+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0


🛑 Gitleaks has detected a secret with rule-id `` in commit 4c557ab.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 4c557ab7aa418e1636a44b2c1f077b5c0bcc8fff:.github/workflow_templates/gitleaks.yml::7 >> .gitleaksignore

github-actions · 2024-09-18T07:55:07Z

id-rsa

@@ -0,0 +1,8 @@
+# Тестовый ключ для проверки gitleaks
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW


🛑 Gitleaks has detected a secret with rule-id `` in commit 292ff99.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 292ff99850d78f6a0683263709bd73072b797468:id-rsa::3 >> .gitleaksignore

github-actions · 2024-09-18T07:55:08Z

id-rsa

+# Тестовый ключ для проверки gitleaks
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+QyNTUxOQAAACAv4dpI0AGiD1J2GdUJ0e+tczr2+tbBxe0G8R6wHoJUXgAAAJhdCrO4XQqz


🛑 Gitleaks has detected a secret with rule-id `` in commit 292ff99.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 292ff99850d78f6a0683263709bd73072b797468:id-rsa::4 >> .gitleaksignore

github-actions · 2024-09-18T07:55:09Z

id-rsa

+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+QyNTUxOQAAACAv4dpI0AGiD1J2GdUJ0e+tczr2+tbBxe0G8R6wHoJUXgAAAJhdCrO4XQqz
+uAAAAAtzc2gtZWQyNTUxOQAAACAv4dpI0AGiD1J2GdUJ0e+tczr2+tbBxe0G8R6wHoJUXg


🛑 Gitleaks has detected a secret with rule-id `` in commit 292ff99.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 292ff99850d78f6a0683263709bd73072b797468:id-rsa::5 >> .gitleaksignore

github-actions · 2024-09-18T07:55:11Z

id-rsa

+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+QyNTUxOQAAACAv4dpI0AGiD1J2GdUJ0e+tczr2+tbBxe0G8R6wHoJUXgAAAJhdCrO4XQqz
+uAAAAAtzc2gtZWQyNTUxOQAAACAv4dpI0AGiD1J2GdUJ0e+tczr2+tbBxe0G8R6wHoJUXg
+AAAECwx4OZhkgo8MhWUhLBr+fobg7Gy93EA3vhkt9iTFxjXi/h2kjQAaIPUnYZ1QnR761z


🛑 Gitleaks has detected a secret with rule-id `` in commit 292ff99.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 292ff99850d78f6a0683263709bd73072b797468:id-rsa::6 >> .gitleaksignore

github-actions · 2024-09-18T07:55:12Z

id-rsa

+QyNTUxOQAAACAv4dpI0AGiD1J2GdUJ0e+tczr2+tbBxe0G8R6wHoJUXgAAAJhdCrO4XQqz
+uAAAAAtzc2gtZWQyNTUxOQAAACAv4dpI0AGiD1J2GdUJ0e+tczr2+tbBxe0G8R6wHoJUXg
+AAAECwx4OZhkgo8MhWUhLBr+fobg7Gy93EA3vhkt9iTFxjXi/h2kjQAaIPUnYZ1QnR761z
+Ovb61sHF7QbxHrAeglReAAAAEXJvb3RAMDY2NTIyNmUxZTRjAQIDBA==


🛑 Gitleaks has detected a secret with rule-id `` in commit 292ff99.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 292ff99850d78f6a0683263709bd73072b797468:id-rsa::7 >> .gitleaksignore

github-actions · 2024-09-18T07:55:13Z

.github/workflows/gitleaks.yml

+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0


🛑 Gitleaks has detected a secret with rule-id `` in commit 4c557ab.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo 4c557ab7aa418e1636a44b2c1f077b5c0bcc8fff:.github/workflows/gitleaks.yml::11 >> .gitleaksignore

github-actions · 2024-09-18T07:55:14Z

CHANGELOG/CHANGELOG-v1.63.9.yml

+dhctl:
+  fixes:
+    - summary: Revert ensure required namespaces while resources creation.
+      pull_request: https://github.com/deckhouse/deckhouse/pull/9715


🛑 Gitleaks has detected a secret with rule-id `` in commit bfe7fef.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo bfe7fefd271b5ab232efba1e3c0a708606202f14:CHANGELOG/CHANGELOG-v1.63.9.yml::4 >> .gitleaksignore

github-actions · 2024-09-18T07:55:16Z

CHANGELOG/CHANGELOG-v1.63.md

@@ -68,6 +68,7 @@
 - **[deckhouse-controller]** Fixed panic when processing terminating deckhouse pod. [#9621](https://github.com/deckhouse/deckhouse/pull/9621)
 - **[deckhouse-controller]** Fix panic on invalid module image [#9231](https://github.com/deckhouse/deckhouse/pull/9231)
 - **[deckhouse-controller]** Deckhouse update metrics restored. [#9147](https://github.com/deckhouse/deckhouse/pull/9147)
+ - **[dhctl]** Revert ensure required namespaces while resources creation. [#9715](https://github.com/deckhouse/deckhouse/pull/9715)


🛑 Gitleaks has detected a secret with rule-id `` in commit bfe7fef.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo bfe7fefd271b5ab232efba1e3c0a708606202f14:CHANGELOG/CHANGELOG-v1.63.md::71 >> .gitleaksignore

github-actions · 2024-09-18T08:54:32Z

.github/workflows/trufflehog.yml

+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0


🛑 Gitleaks has detected a secret with rule-id `` in commit f0cbd9c.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo f0cbd9ca97ee9dff13529f44323a8476cdbb0541:.github/workflows/trufflehog.yml::11 >> .gitleaksignore

github-actions · 2024-09-18T08:54:34Z

.github/workflow_templates/trufflehog.yml

+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0


🛑 Gitleaks has detected a secret with rule-id `` in commit f0cbd9c.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo f0cbd9ca97ee9dff13529f44323a8476cdbb0541:.github/workflow_templates/trufflehog.yml::7 >> .gitleaksignore

github-actions · 2024-09-18T09:10:37Z

1.json

+{
+  "credentional": {
+    "user": "testuser",
+    "password": "deese0wie2tahph2mooyaiPoorie0Nah"


🛑 Gitleaks has detected a secret with rule-id generic-api-key in commit b97269e.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo b97269e72c762f870d438dd445c6ad4025bfd38a:1.json:generic-api-key:4 >> .gitleaksignore

github-actions · 2024-09-18T09:10:38Z

1.sh

+#!/usr/bin/env bash
+
+url="https://api.github.com"
+token="ghp_CTbv1bPL14y0TtwfPveRYS3Cred4oken"


🛑 Gitleaks has detected a secret with rule-id generic-api-key in commit b97269e.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo b97269e72c762f870d438dd445c6ad4025bfd38a:1.sh:generic-api-key:4 >> .gitleaksignore

github-actions · 2024-09-18T09:10:40Z

id-rsa

@@ -0,0 +1,8 @@
+# Тестовый ключ для проверки gitleaks
+-----BEGIN OPENSSH PRIVATE KEY-----


🛑 Gitleaks has detected a secret with rule-id private-key in commit b97269e.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo b97269e72c762f870d438dd445c6ad4025bfd38a:id-rsa:private-key:2 >> .gitleaksignore

github-actions · 2024-09-18T10:49:49Z

1-1.json

+{
+  "credentional": {
+    "user": "testuser",
+    "password": "deese0wie2tahph2mooyaiPoorie0Nah"


🛑 Gitleaks has detected a secret with rule-id generic-api-key in commit e81cdf0.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo e81cdf051192833afdd28898cbd1233d2cdc9d92:1-1.json:generic-api-key:4 >> .gitleaksignore

github-actions · 2024-09-18T10:49:50Z

1.json

+{
+  "credentional": {
+    "user": "testuser",
+    "password": "deese0wie2tahph2mooyaiPoorie0Nah"


🛑 Gitleaks has detected a secret with rule-id generic-api-key in commit e81cdf0.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo e81cdf051192833afdd28898cbd1233d2cdc9d92:1.json:generic-api-key:4 >> .gitleaksignore

github-actions · 2024-09-18T10:49:52Z

1-1.sh

+#!/usr/bin/env bash
+
+url="https://api.github.com"
+token="ghp_CTbv1bPL14y0TtwfPveRYS3Cred4oken"


🛑 Gitleaks has detected a secret with rule-id generic-api-key in commit e81cdf0.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo e81cdf051192833afdd28898cbd1233d2cdc9d92:1-1.sh:generic-api-key:4 >> .gitleaksignore

github-actions · 2024-09-18T10:49:53Z

1.sh

+#!/usr/bin/env bash
+
+url="https://api.github.com"
+token="ghp_CTbv1bPL14y0TtwfPveRYS3Cred4oken"


🛑 Gitleaks has detected a secret with rule-id generic-api-key in commit e81cdf0.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo e81cdf051192833afdd28898cbd1233d2cdc9d92:1.sh:generic-api-key:4 >> .gitleaksignore

github-actions · 2024-09-18T10:49:54Z

id-rsa

@@ -0,0 +1,8 @@
+# Тестовый ключ для проверки gitleaks
+-----BEGIN OPENSSH PRIVATE KEY-----


🛑 Gitleaks has detected a secret with rule-id private-key in commit e81cdf0.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo e81cdf051192833afdd28898cbd1233d2cdc9d92:id-rsa:private-key:2 >> .gitleaksignore

github-actions · 2024-09-18T10:49:55Z

id-rsa-1

@@ -0,0 +1,8 @@
+# Тестовый ключ для проверки gitleaks
+-----BEGIN OPENSSH PRIVATE KEY-----


🛑 Gitleaks has detected a secret with rule-id private-key in commit e81cdf0.
If this secret is a true positive, please rotate the secret ASAP.

If this secret is a false positive, you can add the fingerprint below to your .gitleaksignore file and commit the change to this branch.

echo e81cdf051192833afdd28898cbd1233d2cdc9d92:id-rsa-1:private-key:2 >> .gitleaksignore

Signed-off-by: Kirill Kramorov <[email protected]>

KraMorK requested review from RomanenkoDenys and name212 as code owners September 17, 2024 10:07

github-actions bot added area/cluster-and-infrastructure go labels Sep 17, 2024

github-actions bot assigned KraMorK Sep 17, 2024

github-actions bot reviewed Sep 17, 2024

View reviewed changes

github-actions bot reviewed Sep 18, 2024

View reviewed changes

KraMorK force-pushed the feat/add-gitleaks branch from 47aff1c to e81cdf0 Compare September 18, 2024 10:49

github-actions bot reviewed Sep 18, 2024

View reviewed changes

[feat] add talisman

d2e69ac

Signed-off-by: Kirill Kramorov <[email protected]>

KraMorK force-pushed the feat/add-gitleaks branch from e81cdf0 to d2e69ac Compare September 18, 2024 11:16

[feat] add talisman

6ef81d8

Signed-off-by: Kirill Kramorov <[email protected]>

KraMorK force-pushed the main branch from 0873e70 to 1f567c5 Compare September 19, 2024 09:33

KraMorK closed this Sep 19, 2024

KraMorK deleted the feat/add-gitleaks branch September 19, 2024 09:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Feat/add gitleaks #337

Feat/add gitleaks #337

KraMorK commented Sep 17, 2024

github-actions bot Sep 17, 2024

github-actions bot Sep 17, 2024

github-actions bot Sep 17, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

github-actions bot Sep 18, 2024

		@@ -0,0 +1,8 @@
		# Тестовый ключ для проверки gitleaks
		-----BEGIN OPENSSH PRIVATE KEY-----

		@@ -0,0 +1,4 @@
		#!/usr/bin/env bash

		var="ewogICJjcmVkZW50aW9uYWwiOiB7CiAgICAidXNlciI6ICJ0ZXN0dXNlciIsCiAgICAicGFzc3dvcmQiOiAiZGVlc2Uwd2llMnRhaHBoMm1vb3lhaVBvb3JpZTBOYWgiCiAgfQp9Cg=="

Feat/add gitleaks #337

Feat/add gitleaks #337

Conversation

KraMorK commented Sep 17, 2024

Description

Why do we need it, and what problem does it solve?

Why do we need it in the patch release (if we do)?

What is the expected result?

Checklist

Changelog entries

github-actions bot Sep 17, 2024

Choose a reason for hiding this comment

github-actions bot Sep 17, 2024

Choose a reason for hiding this comment

github-actions bot Sep 17, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment

github-actions bot Sep 18, 2024

Choose a reason for hiding this comment