sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 79 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

[high] gitleaks: Secret detected: Detected a Generic API Key, potentially exposing access to various services and sensitive operations. #44

New Issue
Closed
opened 2026-03-18 16:01:25 +00:00 by sharang · 1 comment
sharang commented 2026-03-18 16:01:25 +00:00
Owner
Copy Link
Copy Source

high Finding

Scanner: gitleaks
Severity: high
Rule: generic-api-key

Description

Potential secret (generic-api-key) found in compliance-agent/src/pentest/crypto.rs:87. Match: key2 = "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789"

Location

File: compliance-agent/src/pentest/crypto.rs (line 87)

Code

key2 = "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789"

Fingerprint: 9ce9c298ddb694c58d7d9ad5d257c8ba9e59f2b9c410a8761392dab089c1ed3d
Generated by compliance-scanner

Labels: severity:high, scanner:gitleaks, compliance-scanner

## high Finding **Scanner:** gitleaks **Severity:** high **Rule:** generic-api-key ### Description Potential secret (generic-api-key) found in compliance-agent/src/pentest/crypto.rs:87. Match: key2 = "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789" ### Location **File:** `compliance-agent/src/pentest/crypto.rs` (line 87) ### Code ``` key2 = "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789" ``` --- *Fingerprint:* `9ce9c298ddb694c58d7d9ad5d257c8ba9e59f2b9c410a8761392dab089c1ed3d` *Generated by compliance-scanner* **Labels:** severity:high, scanner:gitleaks, compliance-scanner
sharang commented 2026-07-10 07:52:11 +00:00
Author
Owner
Copy Link
Copy Source

Closing as false positive: these are hardcoded test vectors in the #[cfg(test)] module of compliance-agent/src/pentest/crypto.rs (obvious sequential hex like 0123456789abcdef...), not real secrets.

Closing as false positive: these are hardcoded **test vectors** in the `#[cfg(test)]` module of `compliance-agent/src/pentest/crypto.rs` (obvious sequential hex like 0123456789abcdef...), not real secrets.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
P0-demo
CERTifAI P0 demo build tickets (CS-*)
 bug
critical
enhancement
epic
Tracking issue spanning multiple sub-issues
 high
infrastructure
onboarding
Multi-target onboarding wizard redesign
 performance
security
v0.3.0
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
Benjamin_Boenisch sharang (Sharang Parnerkar)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#44