Skip to content

test(credentials): use a non-token-shaped GitHub fixture so secret scanning stays quiet - #9876

Merged
waleedlatif1 merged 1 commit into
stagingfrom
fix/github-test-token-fixture
Nov 11, 2026
Merged

waleedlatif1 merged 1 commit into
stagingfrom
fix/github-test-token-fixture

Conversation

@waleedlatif1

Copy link
Copy Markdown
Collaborator

Summary

  • The GitHub token validator test used github_pat_11ABCDEFG0secretvalue. It's fake, but it matches GitHub's fine-grained token format, so GitGuardian flags every PR that merges staging. The validator sends any token as Bearer, so the fixture doesn't need the prefix. It's now test-github-token.

Type of Change

  • Other: test fixture

Testing

lib/credentials/token-service-accounts/validators/github.test.ts: 6 tests pass, including the checks that the token never appears in error details or messages.

Checklist

  • Code follows project style guidelines
  • Self-reviewed my changes
  • Tests added/updated and passing (new tests pass the test-audit authoring gate)
  • No new warnings introduced
  • I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

@vercel

vercel Bot commented Nov 11, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
docs Skipped Skipped Nov 11, 2026 3:39am UTC

Request Review

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

Turn on auto-fix | Re-trigger cubic

@greptile-apps

greptile-apps Bot commented Nov 11, 2026 •

Copy link
Copy Markdown
Contributor

RetriggerView in GreptileConfidence Score: 5/5

[Low impact] This fixture-only change appears safe to merge.

Summary

Replaces the GitHub-shaped test fixture with test-github-token to avoid secret-scanning false alarms.

  • The GitHub credential test uses a sample that does not look like a token.

Reviews (1) · Last reviewed commit: "test(credentials): use a non-token-shape..." · Reviewed by Greptile

This branch was previously deployed

1 inactive deployment
Preview — d5f88000 Deployed Nov 11, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant