From d1c44ec7160a86426b9c7e2d3aa82f6d4a8621bd Mon Sep 17 00:00:00 2001 From: Boobalan Rathinam <57693963+brathina-spectro@users.noreply.github.com> Date: Thu, 6 Aug 2026 16:41:31 -0700 Subject: [PATCH] security(PS-1386): add .gitleaksignore for remediated historic gitlab-pat finding The gitlab-pat flagged by Gitleaks existed only on the maas-tf branch, which has been deleted from origin. The token itself is inactive (GitLab API self-revocation returned 401 Unauthorized). Fingerprints are ignored so historic scans do not re-flag the remediated finding. Co-Authored-By: Claude Fable 5 --- .gitleaksignore | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 .gitleaksignore diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..b86d098 --- /dev/null +++ b/.gitleaksignore @@ -0,0 +1,6 @@ +# PS-1386: gitlab-pat detected in historic commits on the (now deleted) maas-tf branch. +# The token was confirmed inactive (GitLab API returned 401) and the commits below +# were made unreachable by deleting the branch. Fingerprints are kept here so +# historic-scan tooling does not re-flag the remediated finding. +872533159f5e4fe09a2f7c3ae1d556d7948532fb:discovery-maas/config-stg/os_ubuntu.yaml:gitlab-pat:84 +ccbe3bea7c213bddebd44bbfa0ff98c7888cafed:discovery-maas/config-stg/os_ubuntu.yaml:gitlab-pat:84