Skip to content

Several false positives detected for secrets #1228

@yrobla

Description

@yrobla

Describe the issue

When having fim enabled, it's detecting several false positives, for litecoin and high entropy:

Found 5 secrets:              lineno=145 module=secrets pathname=/Users/yolanda/development/codegate-upstream/src/codegate/pipeline/secrets/secrets.py
2025-03-05T13:17:12.674086Z [info     ] 
Service: High Entropy
Type: Potential Secret
Key: conversation_summary
Original: v1_models.ConversationSummary(
Encrypted: REDACTED<#e77f3f65-e76f-4095-83c3-c8afe28cf1d5#> lineno=153 module=secrets pathname=/Users/yolanda/development/codegate-upstream/src/codegate/pipeline/secrets/secrets.py
2025-03-05T13:17:12.674191Z [info     ] 
Service: High Entropy
Type: Potential Secret
Key: resp
Original: v1_models.ListWorkspacesResponse.from_db_workspaces(wslist)
Encrypted: REDACTED<#57bc9501-d3fe-467d-ab80-5c3181caf0ad#> lineno=153 module=secrets pathname=/Users/yolanda/development/codegate-upstream/src/codegate/pipeline/secrets/secrets.py
2025-03-05T13:17:12.674268Z [info     ] 
Service: High Entropy
Type: Potential Secret
Key: resp
Original: v1_models.ListActiveWorkspacesResponse.from_db_workspaces(activews)
Encrypted: REDACTED<#5d65f438-53e7-4e4d-9ce3-4417604ac6c4#> lineno=153 module=secrets pathname=/Users/yolanda/development/codegate-upstream/src/codegate/pipeline/secrets/secrets.py
2025-03-05T13:17:12.674330Z [info     ] 
Service: Addresses
Type: Litecoin
Key: None
Original: v1_models.ListActiveWorkspacesResponse:
Encrypted: REDACTED<#70dd737b-56ae-4af2-81f6-25279465bdd9#> lineno=153 module=secrets pathname=/Users/yolanda/development/codegate-upstream/src/codegate/pipeline/secrets/secrets.py
2025-03-05T13:17:12.674389Z [info     ] 
Service: High Entropy
Type: Potential Secret
Key: resp
Original: v1_models.ListWorkspacesResponse.from_db_workspaces_with_sessioninfo(wslist)
Encrypted: REDACTED<#68da1a18-92b5-4c16-8f72-3c2a0cd573d7#> lineno=153 module=secrets pathname=/Users/yolanda/development/codegate-upstream/src/codegate/pipeline/secrets/secrets.py

Steps to Reproduce

just use copilot with codegate, and watch the terminal detect secrets

Operating System

MacOS (Arm)

IDE and Version

latest

Extension and Version

latest

Provider

GitHub Copilot

Model

latest

Codegate version

latest

Logs

No response

Additional Context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions