Secrets scanning does not find a generic token that gitleaks finds.
Summary
Our secrets analyzer does not pick up specific tokens that gitleaks itself does.
Steps to reproduce / Example Project
See security-products/tests/secrets!54.
What is the current bug behavior?
That example secret is not found by our analyzer.
What is the expected correct behavior?
The example secret should be found.
Relevant logs and/or screenshots
Output of checks
This bug happens on GitLab.com
Possible fixes
- We're not doing any path- or entropy-based filtering, are we?
Edited by Katrin Leinweber