Remove ruby gem tests for DoD container project
For the DoD container project, we are getting large numbers of results back where secrets are being detected in ruby gem test/spec files. We requested that they whitelist those results but they don't currently appear to have mechanism for doing that and are requesting that we remove the test files from our builds.
Example scan results for GitLab unicorn:
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/doorkeeper-openid_connect-1.5.0/lib/generators/doorkeeper/openid_connect/templates/initializer.rb regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/excon-0.62.0/tests/data/127.0.0.1.cert.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/excon-0.62.0/tests/data/excon.cert.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/fog-google-1.9.1/test/helpers/integration_test_helper.rb regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/google-api-client-0.23.4/samples/cli/.env regexp=API_KEY=(?i).*api(-|_)key( =+ ).(?<![A-Z0-9])[A-Z0-9]{20,60}(?![A-Z0-9]).
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/google-api-client-0.23.4/samples/cli/README.md regexp=API_KEY=(?i).*api(-|_)key( =+ ).(?<![A-Z0-9])[A-Z0-9]{20,60}(?![A-Z0-9]).
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/grpc-1.19.0-x86_64-linux/src/ruby/spec/testdata/client.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/grpc-1.19.0-x86_64-linux/src/ruby/spec/testdata/server1.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/httparty-0.16.4/spec/fixtures/ssl/generated/ca.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/httparty-0.16.4/spec/fixtures/ssl/generated/server.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/httpclient-2.8.3/sample/ssl/0key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/httpclient-2.8.3/sample/ssl/1000key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/httpclient-2.8.3/test/client.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/httpclient-2.8.3/test/client-pass.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/httpclient-2.8.3/test/server.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/json-jwt-1.9.4/README.md regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/json-jwt-1.9.4/spec/fixtures/ecdsa/256/private_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/json-jwt-1.9.4/spec/fixtures/ecdsa/384/private_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/json-jwt-1.9.4/spec/fixtures/ecdsa/512/private_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/json-jwt-1.9.4/spec/fixtures/rsa/private_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/ec256-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/ec256-wrong-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/ec384-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/ec384-wrong-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/ec512-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/ec512-wrong-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/rsa-1024-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/rsa-2048-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/rsa-2048-wrong-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/jwt-2.1.0/spec/fixtures/certs/rsa-4096-private.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/kubeclient-4.4.0/test/config/external-key.rsa regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/net-ldap-0.16.0/test/fixtures/ca/cakey.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/ruby-saml-1.7.2/test/certificates/formatted_private_key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/ruby-saml-1.7.2/test/certificates/formatted_rsa_private_key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/ruby-saml-1.7.2/test/certificates/invalid_private_key1 regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/ruby-saml-1.7.2/test/certificates/invalid_rsa_private_key1 regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/srv/gitlab/vendor/bundle/ruby/2.6.0/gems/ruby-saml-1.7.2/test/certificates/ruby-saml.key regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/alternate_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/child_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/client.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/data/gem-private_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/encrypted_private_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/grandchild_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/invalidchild_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/invalid_client.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/invalid_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/private3072_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/private_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/ssl_key.pem regexp=PRIV_KEY=(?i)-+BEGIN(.*)PRIVATE KEY-+
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/test_gem_commands_owner_command.rb regexp=API_KEY=(?i).*api(-|_)key( =+ ).(?<![A-Z0-9])[A-Z0-9]{20,60}(?![A-Z0-9]).
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/test_gem_commands_signin_command.rb regexp=API_KEY=(?i).*api(-|_)key( =+ ).(?<![A-Z0-9])[A-Z0-9]{20,60}(?![A-Z0-9]).
-
Secret search analyzer found regexp match in container: file=/usr/lib/ruby/gems/2.6.0/gems/rubygems-update-2.7.10/test/rubygems/test_gem_gemcutter_utilities.rb regexp=API_KEY=(?i).*api(-|_)key( =+ ).(?<![A-Z0-9])[A-Z0-9]{20,60}(?![A-Z0-9]).