🚨 Secret Detection Test - Security Widget Testing
🔍 Purpose
This merge request contains FAKE secrets to test GitLab's secret detection capabilities and verify the MR security widget functionality.
📁 Files Added
-
test_secrets.env- Environment variables with fake AWS keys, API tokens, database URLs -
deploy.sh- Shell script with embedded credentials -
README_TEST_SECRETS.md- Documentation
🚨 Test Secrets Included
-
AWS Access Key:
AKIA1234567890EXAMPLE -
AWS Secret Key:
wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY -
Stripe API Keys:
sk_test_1234567890abcdefghijklmnopqrstuvwxyz -
GitHub Token:
ghp_1234567890abcdefghijklmnopqrstuvwxyz12 - JWT Tokens, Database URLs, Private Keys
✅ Expected Results
-
🔄 CI/CD pipeline should trigger automatically -
🛡️ Secret detection job should run and find vulnerabilities -
📊 Security widget should populate with detected secrets -
🚨 Multiple security findings should appear
⚠️ IMPORTANT DISCLAIMER
- ALL SECRETS ARE COMPLETELY FAKE
- Created specifically for testing purposes
- No real credentials or sensitive data
- Safe for demonstration and testing