Skip to content

Secrets scanning does not find a generic token that gitleaks finds.

Summary

Our secrets analyzer does not pick up specific tokens that gitleaks itself does.

Steps to reproduce / Example Project

See security-products/tests/secrets!54.

What is the current bug behavior?

That example secret is not found by our analyzer.

What is the expected correct behavior?

The example secret should be found.

Relevant logs and/or screenshots

Output of checks

This bug happens on GitLab.com

Possible fixes

  • We're not doing any path- or entropy-based filtering, are we?
Edited by Katrin Leinweber