quay/internal/auth at master - quay

mirror of https://github.com/quay/quay.git synced 2026-10-23 09:49:06 +03:00

Files

jbpratt 2c8e5a656b NO-ISSUE: fix(security): add gitleaks fixture marker and clear generic secret findings (#7416 )

fix(security): add gitleaks fixture marker and clear generic secret findings

Add a root .gitleaks.toml that extends the default rules and allowlists
the QUAY_FIXTURE_ONLY stopword, so dummy test credentials can be marked
explicitly without exempting test paths. Realistic unmarked values are
still reported.

Mark the existing test fixtures with the QUAY_FIXTURE_ONLY- prefix: the
LDAP redaction values, the invalid-Unicode token fixtures, and the shared
DATABASE_SECRET_KEY test value used by CI, the Makefile, initdb and the
test configs. Values that must keep an exact format (encrypted robot
token, Garage RPC secret, the local Keycloak example) get a same-line
gitleaks:allow instead. Document the convention in agent_docs/testing.md
and .github/CONTRIBUTING.md.

NO-ISSUE

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-25 14:09:34 +00:00

basic_test.go

NO-ISSUE: feat(auth): add robot token authentication (#6392 )

2026-07-10 12:59:38 -05:00

basic.go

NO-ISSUE: feat(auth): add robot token authentication (#6392 )

2026-07-10 12:59:38 -05:00

credential_cache.go

PROJQUAY-13204: fix(omr): remember verified passwords so token issuance skips bcrypt (#7151 )

2026-09-17 15:56:18 -05:00

database_verifier.go

PROJQUAY-13204: fix(omr): remember verified passwords so token issuance skips bcrypt (#7151 )