Skip to content

Commit 0bb9b84

Browse files
fix(patch): adjust to not trip false positives (#302)
fix(patch): adjust to not trip false positives • ‹token› is being used by GitHub, even though we replace it for a dummy value that has no meaning, it still looks like a valid token, so it triggers the “Data leak protection” • ‹Set-Cookie› is used by Pagure, it appears that it contains a cookie for authenticating the session; same as before, not valid anymore, but for the safety reasons · also it looks like the replacement is case-sensitive as there is already one replacement defined for ‹set-cookie› Reviewed-by: Maja Massarini
2 parents 2013b01 + 0d19599 commit 0bb9b84

File tree

2 files changed

+6
-1
lines changed

2 files changed

+6
-1
lines changed

.pre-commit-hooks.yaml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,8 +16,9 @@
1616
--replaces "github.Requester%requests.sessions%send:Content-Security-Policy:str:default-src 'none'"
1717
--replaces "requests.sessions%_content:expires_at:str:2019-11-01T14:35:53Z"
1818
--replaces "requests.sessions%send:elapsed:float:0.2"
19-
--replaces "requests.sessions%_content:token:str:v1.1cd89d399b8c70f8b88e22cbdaa72abbe5e390db"
19+
--replaces "requests.sessions%_content:token:str:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
2020
--replaces ":set-cookie:str:a 'b';"
21+
--replaces ":Set-Cookie:str:a='b';"
2122
--replaces "copr.v3.helpers:login:str:somelogin"
2223
--replaces "copr.v3.helpers:token:str:sometoken"
2324
language: python

plans/ogr-integration.fmf

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,3 +22,7 @@ adjust:
2222
- when: "distro == rhel-8 or distro == centos-8 or distro == centos-stream-8"
2323
because: "ogr doesn't support EL 8"
2424
enabled: false
25+
26+
- when: "distro == centos-stream-9 or distro == fedora-40"
27+
because: "packaged version of python-pyforgejo is not sufficient"
28+
enabled: false

0 commit comments

Comments
 (0)