yuqei/ai-contract-platform
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

chore(security): audit precise release scan false positives

Browse Source
This commit is contained in:
yuqei
2026-10-07 21:04:48 +08:00
parent e34410d6a3
commit 8cfd14f2e3
1 changed files with 696 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.secrets.baseline
+696
View File
@@ -669,6 +669,14 @@
"line_number": 164,
"is_secret": false,
"audit_reason": "Reviewed Git commit identifier in the release closure register; RiskContext=0."
},
{
"type": "Secret Keyword",
"filename": "docs/qa/multiscene-closeout-20260910/remaining-closure-register-20260919.json",
"hashed_secret": "8e215521487c4a48fe6d5c79f298fd0305837cc1",
"line_number": 38,
"is_secret": false,
"audit_reason": "Release register key-purpose restriction label; it contains no credential material."
}
],
"docs/qa/template-prompt-audit-20260828/tp06-24-2/source-manifest-v1.json": [
@@ -6687,6 +6695,30 @@
"line_number": 62,
"is_secret": false,
"audit_reason": "Compose project-name environment assignment, not a credential."
},
{
"type": "Base64 High Entropy String",
"filename": "yuqei-infra/tests/test_production_compose_merge_gate.py",
"hashed_secret": "423a23637b62929cc6b5ffe6e93542826d28073f",
"line_number": 70,
"is_secret": false,
"audit_reason": "Compose project-owned volume name assignment used by a fake Compose runner; not a credential."
},
{
"type": "Base64 High Entropy String",
"filename": "yuqei-infra/tests/test_production_compose_merge_gate.py",
"hashed_secret": "c3be85405a5abac6945017d8fae719ff6b250b4a",
"line_number": 72,
"is_secret": false,
"audit_reason": "Explicit synthetic object-storage credential in a mocked Compose environment/result fixture."
},
{
"type": "Secret Keyword",
"filename": "yuqei-infra/tests/test_production_compose_merge_gate.py",
"hashed_secret": "65fde405ce9f1889b2d11dccb0b53a593ad9113a",
"line_number": 138,
"is_secret": false,
"audit_reason": "Explicit synthetic object-storage credential in a mocked Compose environment/result fixture."
}
],
"yuqei-infra/tests/test_production_release_tools.py": [
@@ -6745,6 +6777,14 @@
"line_number": 55,
"is_secret": false,
"audit_reason": "Synthetic PostgreSQL URL with a placeholder password used by an infrastructure test."
},
{
"type": "Secret Keyword",
"filename": "yuqei-infra/tests/test_production_release_tools.py",
"hashed_secret": "d831ffdd9e2d30fb5521d7bd87a0eb72c33e7074",
"line_number": 132,
"is_secret": false,
"audit_reason": "Fake backup object-storage password used only by release-tool fixture tests."
}
],
"yuqei-infra/tests/test_rc06_publication_batch.py": [
@@ -6860,6 +6900,662 @@
"is_secret": false,
"audit_reason": "Reviewed deterministic SHA-256/digest or fixture/evidence fingerprint; RiskContext=0."
}
],
"yuqei-ai-platform/services/ai-platform-api/tests/test_health.py": [
{
"type": "Secret Keyword",
"filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_health.py",
"hashed_secret": "a0f4ea7d91495df92bbac2e2149dfb850fe81396",
"line_number": 80,
"is_secret": false,
"audit_reason": "Deliberately short fake publication secret in a readiness rejection test."
}
],
"yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py": [
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "7756745a84f7c6ea2ae1b346cf621000420cde67",
"line_number": 19,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "ce81f011790b1145a43057fcda5084d440f93f51",
"line_number": 20,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "462b47199315053615b32bd68a27af7b54b3b839",
"line_number": 21,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "481a7814086edda5234fd58ab5b9e3af4cf007ab",
"line_number": 22,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "7735be9b8c831cb20b3489c4ef08767aa99720d6",
"line_number": 23,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "8db46b32ab5130fe46823a63a2a2d13e9a5a066a",
"line_number": 24,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "21cfc34cbec3f51303f53b718461ae2afad8e274",
"line_number": 28,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "e43a225a8ca4fa8aa329bfa8129718eb234e5f6f",
"line_number": 29,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "9989b0e886e9b3af99890e4558655f0bea203b73",
"line_number": 30,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "5dfa9ed6a34b1b2d95c66e8262ef58a6af90b46f",
"line_number": 31,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "569c58e032286c5a0586366c807f22239f56d2ff",
"line_number": 32,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "10556d93a8313bbf7e26bb52fe5cff2e99afa88f",
"line_number": 33,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "72587d615b3a522119cbe42dc46cab5100e3003e",
"line_number": 34,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "20891644f7e1bd4e46f2da13a0e4cb77ed69dd9f",
"line_number": 35,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "c9c0ac44c0935dcbb8beddd89b866d4df1cb2821",
"line_number": 41,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "5490e681440abc6155860135cfc60c44f6570c23",
"line_number": 49,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "262ef35b0bd1ca1034a0219df946f420a0745606",
"line_number": 50,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "9f13f81f955cd37fd747fa72d876f701a0f5e776",
"line_number": 51,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "621d76519c92be82b13a8abd7dcc1fc8af724b1c",
"line_number": 52,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "b34fc83b1e18145a4b7a996147f302b6cd0a3a66",
"line_number": 53,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "8a2f3c4ba16c302deeb4ff7719a441bcd66890c7",
"line_number": 54,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "90bb3fec304a48238e06ebbd899459b299ec45b2",
"line_number": 55,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "0b19e2b2de4e011d6c49f0c8f6da90d0dabdd186",
"line_number": 56,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "0cc16b2359b09d219380291470fb0916b686f75f",
"line_number": 63,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "381d4565722458b6be520fdb2ec032a17e0af001",
"line_number": 64,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "9793f1efe93a126834098fc7733aa076ac4d28f1",
"line_number": 65,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "cfde6b52ebff4a91aa2cd85df9e070d8a57f3a62",
"line_number": 66,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py",
"hashed_secret": "73748e76cc6ea039787566da74c86e1465bcb858",
"line_number": 67,
"is_secret": false,
"audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential."
}
],
"yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py": [
{
"type": "Secret Keyword",
"filename": "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py",
"hashed_secret": "f5731541f248d2eda0efc7b2463003675947f96c",
"line_number": 60,
"is_secret": false,
"audit_reason": "Fake general AI service key in local facade startup configuration tests."
},
{
"type": "Secret Keyword",
"filename": "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py",
"hashed_secret": "0cfde3c10da81372e5828b122066eee05774f191",
"line_number": 65,
"is_secret": false,
"audit_reason": "Fake web proxy key in local facade startup configuration tests."
},
{
"type": "Secret Keyword",
"filename": "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py",
"hashed_secret": "ee468c9ca14628461ad598acf59c3e3ea13315b0",
"line_number": 109,
"is_secret": false,
"audit_reason": "Fake low-level coordinator key used to assert disabled unsafe startup."
}
],
"yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_saga.py": [
{
"type": "Secret Keyword",
"filename": "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_saga.py",
"hashed_secret": "9c3b87ebbf6e5f2db5fe2c488dae713c67d914cc",
"line_number": 131,
"is_secret": false,
"audit_reason": "Fixed fake participant key in a monkeypatched HTTP client TLS/header test; no network request."
}
],
"yuqei-contract-platform/services/kms-gateway/tests/test_sdk_compatibility.py": [
{
"type": "Secret Keyword",
"filename": "yuqei-contract-platform/services/kms-gateway/tests/test_sdk_compatibility.py",
"hashed_secret": "1e02fee72961255a0c4aecf788c3831c91ccdd55",
"line_number": 58,
"is_secret": false,
"audit_reason": "Synthetic password for an RSA PKCS12 key generated only in a temporary SDK compatibility test."
}
],
"yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json": [
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "26f611b021387df139456d39bd14ed2c3cd0dc97",
"line_number": 9,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "abcff87abffe8001eec1238eb8c034a0e4071162",
"line_number": 27,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "b0966b61dd11bf7dbfa61483cd050481e6fe1818",
"line_number": 28,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "21eff064e47311eefb281246f728a29f093fbced",
"line_number": 37,
"is_secret": false,
"audit_reason": "Public upstream Git commit identifier recorded for SDK provenance."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "bd6d4ecb65a82734637810b1bab28c317f5b1c7c",
"line_number": 39,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "721ddfec398c4860ad4fe1b6154e8699ef5aa429",
"line_number": 40,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "11cd919d6e3b4aabbb58dd846ff452001998a2fa",
"line_number": 43,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "5d969c66db4c13a5a655786f41a322e2e8f3f849",
"line_number": 44,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "da356b293f3bc0746958aab431e5ae245ff6b6fb",
"line_number": 55,
"is_secret": false,
"audit_reason": "Public upstream Git commit identifier recorded for SDK provenance."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "90b1eb14d6fb7b230681407bce341112a0e2fb3b",
"line_number": 57,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "8152839fc51078f5bc80a64b9a465e7ae46a344d",
"line_number": 58,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "d375ed3cac7420844e4774bb49c52b1b072b70eb",
"line_number": 59,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "30c082b40f75cd3a6fc839861713d770fcae056f",
"line_number": 62,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "611c3cf1fe800ad973220bdf68e681d82be4945e",
"line_number": 63,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "2c75c79cf27c00afe436e7b5c2c93cc5bdb8126a",
"line_number": 67,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "367127ec0b9b95e9f0792118a9d58ec5c523b38f",
"line_number": 68,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "b083960b7686cb6bfd426e17da073045b8107bc4",
"line_number": 72,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "9f0c612a4eec3a32b1af8efab6e16bf83980e60d",
"line_number": 73,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "6235711b5e326954349e16c6772643613ee509ae",
"line_number": 77,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json",
"hashed_secret": "aebdae1229e33aed1e4a1145f856a55b0d5ac1ea",
"line_number": 78,
"is_secret": false,
"audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel."
}
],
"yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py": [
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "bd6d4ecb65a82734637810b1bab28c317f5b1c7c",
"line_number": 42,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "11cd919d6e3b4aabbb58dd846ff452001998a2fa",
"line_number": 44,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "721ddfec398c4860ad4fe1b6154e8699ef5aa429",
"line_number": 45,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "90b1eb14d6fb7b230681407bce341112a0e2fb3b",
"line_number": 59,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "30c082b40f75cd3a6fc839861713d770fcae056f",
"line_number": 61,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "2c75c79cf27c00afe436e7b5c2c93cc5bdb8126a",
"line_number": 63,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "b083960b7686cb6bfd426e17da073045b8107bc4",
"line_number": 66,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "6235711b5e326954349e16c6772643613ee509ae",
"line_number": 69,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "8152839fc51078f5bc80a64b9a465e7ae46a344d",
"line_number": 74,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "d375ed3cac7420844e4774bb49c52b1b072b70eb",
"line_number": 86,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "26f611b021387df139456d39bd14ed2c3cd0dc97",
"line_number": 87,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "5d969c66db4c13a5a655786f41a322e2e8f3f849",
"line_number": 97,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "611c3cf1fe800ad973220bdf68e681d82be4945e",
"line_number": 100,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "367127ec0b9b95e9f0792118a9d58ec5c523b38f",
"line_number": 101,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "9f0c612a4eec3a32b1af8efab6e16bf83980e60d",
"line_number": 102,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "aebdae1229e33aed1e4a1145f856a55b0d5ac1ea",
"line_number": 103,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "abcff87abffe8001eec1238eb8c034a0e4071162",
"line_number": 109,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Hex High Entropy String",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "b0966b61dd11bf7dbfa61483cd050481e6fe1818",
"line_number": 112,
"is_secret": false,
"audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel."
},
{
"type": "Private Key",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9",
"line_number": 354,
"is_secret": false,
"audit_reason": "PEM header delimiter inside a source replacement/normalization string; no key body exists."
},
{
"type": "Private Key",
"filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py",
"hashed_secret": "be4fc4886bd949b369d5e092eb87494f12e57e5b",
"line_number": 360,
"is_secret": false,
"audit_reason": "PEM header delimiter inside a source replacement/normalization string; no key body exists."
}
],
"yuqei-infra/compose/docker-compose.uat.evidence-trust.yml": [
{
"type": "Secret Keyword",
"filename": "yuqei-infra/compose/docker-compose.uat.evidence-trust.yml",
"hashed_secret": "eed1903a65fb51375c9a57c0d5925ebe4056dcab",
"line_number": 46,
"is_secret": false,
"audit_reason": "Required variable and read-only client-key password file mount path; no password value."
}
],
"yuqei-infra/scripts/rc06-single-reviewer-signing.py": [
{
"type": "Base64 High Entropy String",
"filename": "yuqei-infra/scripts/rc06-single-reviewer-signing.py",
"hashed_secret": "1d278d3c888d1a2fa7eed622bfc02927ce4049af",
"line_number": 970,
"is_secret": false,
"audit_reason": "Complete Base64 alphabet used by the parser; not encoded secret material."
}
],
"yuqei-infra/scripts/run-object-storage-runtime-probe.py": [
{
"type": "Base64 High Entropy String",
"filename": "yuqei-infra/scripts/run-object-storage-runtime-probe.py",
"hashed_secret": "f112b4832d4595fcd58cf7b485accf6901780cf9",
"line_number": 205,
"is_secret": false,
"audit_reason": "Fixed public probe-only password: fresh temporary volume/container, internal Docker network, no published port, and cleanup; never production configuration."
}
],
"yuqei-infra/tests/test_p1_07_6_isolated_uat.py": [
{
"type": "Secret Keyword",
"filename": "yuqei-infra/tests/test_p1_07_6_isolated_uat.py",
"hashed_secret": "e3b7648864c4a1d4fe10f895f8269890f59cafc0",
"line_number": 24,
"is_secret": false,
"audit_reason": "Explicit synthetic UAT object-storage password in a configuration fixture."
}
],
"yuqei-infra/tests/test_rc06_release_trust_bootstrap.py": [
{
"type": "Private Key",
"filename": "yuqei-infra/tests/test_rc06_release_trust_bootstrap.py",
"hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9",
"line_number": 668,
"is_secret": false,
"audit_reason": "PEM header text in a negative assertion that protected bytes must not contain a plaintext private key."
}
]
}
}