From 8cfd14f2e39eb7b3e662b4c72693005e1fa7919d Mon Sep 17 00:00:00 2001 From: yuqei Date: Wed, 7 Oct 2026 21:04:48 +0800 Subject: [PATCH] chore(security): audit precise release scan false positives --- .secrets.baseline | 696 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 696 insertions(+) diff --git a/.secrets.baseline b/.secrets.baseline index 24d896be..87d7fd02 100644 --- a/.secrets.baseline +++ b/.secrets.baseline @@ -669,6 +669,14 @@ "line_number": 164, "is_secret": false, "audit_reason": "Reviewed Git commit identifier in the release closure register; RiskContext=0." + }, + { + "type": "Secret Keyword", + "filename": "docs/qa/multiscene-closeout-20260910/remaining-closure-register-20260919.json", + "hashed_secret": "8e215521487c4a48fe6d5c79f298fd0305837cc1", + "line_number": 38, + "is_secret": false, + "audit_reason": "Release register key-purpose restriction label; it contains no credential material." } ], "docs/qa/template-prompt-audit-20260828/tp06-24-2/source-manifest-v1.json": [ @@ -6687,6 +6695,30 @@ "line_number": 62, "is_secret": false, "audit_reason": "Compose project-name environment assignment, not a credential." + }, + { + "type": "Base64 High Entropy String", + "filename": "yuqei-infra/tests/test_production_compose_merge_gate.py", + "hashed_secret": "423a23637b62929cc6b5ffe6e93542826d28073f", + "line_number": 70, + "is_secret": false, + "audit_reason": "Compose project-owned volume name assignment used by a fake Compose runner; not a credential." + }, + { + "type": "Base64 High Entropy String", + "filename": "yuqei-infra/tests/test_production_compose_merge_gate.py", + "hashed_secret": "c3be85405a5abac6945017d8fae719ff6b250b4a", + "line_number": 72, + "is_secret": false, + "audit_reason": "Explicit synthetic object-storage credential in a mocked Compose environment/result fixture." + }, + { + "type": "Secret Keyword", + "filename": "yuqei-infra/tests/test_production_compose_merge_gate.py", + "hashed_secret": "65fde405ce9f1889b2d11dccb0b53a593ad9113a", + "line_number": 138, + "is_secret": false, + "audit_reason": "Explicit synthetic object-storage credential in a mocked Compose environment/result fixture." } ], "yuqei-infra/tests/test_production_release_tools.py": [ @@ -6745,6 +6777,14 @@ "line_number": 55, "is_secret": false, "audit_reason": "Synthetic PostgreSQL URL with a placeholder password used by an infrastructure test." + }, + { + "type": "Secret Keyword", + "filename": "yuqei-infra/tests/test_production_release_tools.py", + "hashed_secret": "d831ffdd9e2d30fb5521d7bd87a0eb72c33e7074", + "line_number": 132, + "is_secret": false, + "audit_reason": "Fake backup object-storage password used only by release-tool fixture tests." } ], "yuqei-infra/tests/test_rc06_publication_batch.py": [ @@ -6860,6 +6900,662 @@ "is_secret": false, "audit_reason": "Reviewed deterministic SHA-256/digest or fixture/evidence fingerprint; RiskContext=0." } + ], + "yuqei-ai-platform/services/ai-platform-api/tests/test_health.py": [ + { + "type": "Secret Keyword", + "filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_health.py", + "hashed_secret": "a0f4ea7d91495df92bbac2e2149dfb850fe81396", + "line_number": 80, + "is_secret": false, + "audit_reason": "Deliberately short fake publication secret in a readiness rejection test." + } + ], + "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py": [ + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "7756745a84f7c6ea2ae1b346cf621000420cde67", + "line_number": 19, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "ce81f011790b1145a43057fcda5084d440f93f51", + "line_number": 20, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "462b47199315053615b32bd68a27af7b54b3b839", + "line_number": 21, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "481a7814086edda5234fd58ab5b9e3af4cf007ab", + "line_number": 22, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "7735be9b8c831cb20b3489c4ef08767aa99720d6", + "line_number": 23, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "8db46b32ab5130fe46823a63a2a2d13e9a5a066a", + "line_number": 24, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "21cfc34cbec3f51303f53b718461ae2afad8e274", + "line_number": 28, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "e43a225a8ca4fa8aa329bfa8129718eb234e5f6f", + "line_number": 29, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "9989b0e886e9b3af99890e4558655f0bea203b73", + "line_number": 30, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "5dfa9ed6a34b1b2d95c66e8262ef58a6af90b46f", + "line_number": 31, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "569c58e032286c5a0586366c807f22239f56d2ff", + "line_number": 32, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "10556d93a8313bbf7e26bb52fe5cff2e99afa88f", + "line_number": 33, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "72587d615b3a522119cbe42dc46cab5100e3003e", + "line_number": 34, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "20891644f7e1bd4e46f2da13a0e4cb77ed69dd9f", + "line_number": 35, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "c9c0ac44c0935dcbb8beddd89b866d4df1cb2821", + "line_number": 41, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "5490e681440abc6155860135cfc60c44f6570c23", + "line_number": 49, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "262ef35b0bd1ca1034a0219df946f420a0745606", + "line_number": 50, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "9f13f81f955cd37fd747fa72d876f701a0f5e776", + "line_number": 51, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "621d76519c92be82b13a8abd7dcc1fc8af724b1c", + "line_number": 52, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "b34fc83b1e18145a4b7a996147f302b6cd0a3a66", + "line_number": 53, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "8a2f3c4ba16c302deeb4ff7719a441bcd66890c7", + "line_number": 54, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "90bb3fec304a48238e06ebbd899459b299ec45b2", + "line_number": 55, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "0b19e2b2de4e011d6c49f0c8f6da90d0dabdd186", + "line_number": 56, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "0cc16b2359b09d219380291470fb0916b686f75f", + "line_number": 63, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "381d4565722458b6be520fdb2ec032a17e0af001", + "line_number": 64, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "9793f1efe93a126834098fc7733aa076ac4d28f1", + "line_number": 65, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "cfde6b52ebff4a91aa2cd85df9e070d8a57f3a62", + "line_number": 66, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-ai-sdk-python/src/yuqei_sdk/prompt_source_baseline.py", + "hashed_secret": "73748e76cc6ea039787566da74c86e1465bcb858", + "line_number": 67, + "is_secret": false, + "audit_reason": "Public SHA-256 of source Prompt/module bytes or runtime composition, not a credential." + } + ], + "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py": [ + { + "type": "Secret Keyword", + "filename": "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py", + "hashed_secret": "f5731541f248d2eda0efc7b2463003675947f96c", + "line_number": 60, + "is_secret": false, + "audit_reason": "Fake general AI service key in local facade startup configuration tests." + }, + { + "type": "Secret Keyword", + "filename": "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py", + "hashed_secret": "0cfde3c10da81372e5828b122066eee05774f191", + "line_number": 65, + "is_secret": false, + "audit_reason": "Fake web proxy key in local facade startup configuration tests." + }, + { + "type": "Secret Keyword", + "filename": "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py", + "hashed_secret": "ee468c9ca14628461ad598acf59c3e3ea13315b0", + "line_number": 109, + "is_secret": false, + "audit_reason": "Fake low-level coordinator key used to assert disabled unsafe startup." + } + ], + "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_saga.py": [ + { + "type": "Secret Keyword", + "filename": "yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_saga.py", + "hashed_secret": "9c3b87ebbf6e5f2db5fe2c488dae713c67d914cc", + "line_number": 131, + "is_secret": false, + "audit_reason": "Fixed fake participant key in a monkeypatched HTTP client TLS/header test; no network request." + } + ], + "yuqei-contract-platform/services/kms-gateway/tests/test_sdk_compatibility.py": [ + { + "type": "Secret Keyword", + "filename": "yuqei-contract-platform/services/kms-gateway/tests/test_sdk_compatibility.py", + "hashed_secret": "1e02fee72961255a0c4aecf788c3831c91ccdd55", + "line_number": 58, + "is_secret": false, + "audit_reason": "Synthetic password for an RSA PKCS12 key generated only in a temporary SDK compatibility test." + } + ], + "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json": [ + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "26f611b021387df139456d39bd14ed2c3cd0dc97", + "line_number": 9, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "abcff87abffe8001eec1238eb8c034a0e4071162", + "line_number": 27, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "b0966b61dd11bf7dbfa61483cd050481e6fe1818", + "line_number": 28, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "21eff064e47311eefb281246f728a29f093fbced", + "line_number": 37, + "is_secret": false, + "audit_reason": "Public upstream Git commit identifier recorded for SDK provenance." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "bd6d4ecb65a82734637810b1bab28c317f5b1c7c", + "line_number": 39, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "721ddfec398c4860ad4fe1b6154e8699ef5aa429", + "line_number": 40, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "11cd919d6e3b4aabbb58dd846ff452001998a2fa", + "line_number": 43, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "5d969c66db4c13a5a655786f41a322e2e8f3f849", + "line_number": 44, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "da356b293f3bc0746958aab431e5ae245ff6b6fb", + "line_number": 55, + "is_secret": false, + "audit_reason": "Public upstream Git commit identifier recorded for SDK provenance." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "90b1eb14d6fb7b230681407bce341112a0e2fb3b", + "line_number": 57, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "8152839fc51078f5bc80a64b9a465e7ae46a344d", + "line_number": 58, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "d375ed3cac7420844e4774bb49c52b1b072b70eb", + "line_number": 59, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "30c082b40f75cd3a6fc839861713d770fcae056f", + "line_number": 62, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "611c3cf1fe800ad973220bdf68e681d82be4945e", + "line_number": 63, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "2c75c79cf27c00afe436e7b5c2c93cc5bdb8126a", + "line_number": 67, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "367127ec0b9b95e9f0792118a9d58ec5c523b38f", + "line_number": 68, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "b083960b7686cb6bfd426e17da073045b8107bc4", + "line_number": 72, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "9f0c612a4eec3a32b1af8efab6e16bf83980e60d", + "line_number": 73, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "6235711b5e326954349e16c6772643613ee509ae", + "line_number": 77, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/UPSTREAM.json", + "hashed_secret": "aebdae1229e33aed1e4a1145f856a55b0d5ac1ea", + "line_number": 78, + "is_secret": false, + "audit_reason": "Public SHA-256 of SDK source, license, README, protobuf descriptor, patched file or wheel." + } + ], + "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py": [ + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "bd6d4ecb65a82734637810b1bab28c317f5b1c7c", + "line_number": 42, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "11cd919d6e3b4aabbb58dd846ff452001998a2fa", + "line_number": 44, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "721ddfec398c4860ad4fe1b6154e8699ef5aa429", + "line_number": 45, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "90b1eb14d6fb7b230681407bce341112a0e2fb3b", + "line_number": 59, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "30c082b40f75cd3a6fc839861713d770fcae056f", + "line_number": 61, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "2c75c79cf27c00afe436e7b5c2c93cc5bdb8126a", + "line_number": 63, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "b083960b7686cb6bfd426e17da073045b8107bc4", + "line_number": 66, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "6235711b5e326954349e16c6772643613ee509ae", + "line_number": 69, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "8152839fc51078f5bc80a64b9a465e7ae46a344d", + "line_number": 74, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "d375ed3cac7420844e4774bb49c52b1b072b70eb", + "line_number": 86, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "26f611b021387df139456d39bd14ed2c3cd0dc97", + "line_number": 87, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "5d969c66db4c13a5a655786f41a322e2e8f3f849", + "line_number": 97, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "611c3cf1fe800ad973220bdf68e681d82be4945e", + "line_number": 100, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "367127ec0b9b95e9f0792118a9d58ec5c523b38f", + "line_number": 101, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "9f0c612a4eec3a32b1af8efab6e16bf83980e60d", + "line_number": 102, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "aebdae1229e33aed1e4a1145f856a55b0d5ac1ea", + "line_number": 103, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "abcff87abffe8001eec1238eb8c034a0e4071162", + "line_number": 109, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Hex High Entropy String", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "b0966b61dd11bf7dbfa61483cd050481e6fe1818", + "line_number": 112, + "is_secret": false, + "audit_reason": "Public pinned SHA-256 used to validate SDK source, license, descriptor, patched file or reproducible wheel." + }, + { + "type": "Private Key", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9", + "line_number": 354, + "is_secret": false, + "audit_reason": "PEM header delimiter inside a source replacement/normalization string; no key body exists." + }, + { + "type": "Private Key", + "filename": "yuqei-contract-platform/services/kms-gateway/vendor/alibaba-kms-modern/build_forks.py", + "hashed_secret": "be4fc4886bd949b369d5e092eb87494f12e57e5b", + "line_number": 360, + "is_secret": false, + "audit_reason": "PEM header delimiter inside a source replacement/normalization string; no key body exists." + } + ], + "yuqei-infra/compose/docker-compose.uat.evidence-trust.yml": [ + { + "type": "Secret Keyword", + "filename": "yuqei-infra/compose/docker-compose.uat.evidence-trust.yml", + "hashed_secret": "eed1903a65fb51375c9a57c0d5925ebe4056dcab", + "line_number": 46, + "is_secret": false, + "audit_reason": "Required variable and read-only client-key password file mount path; no password value." + } + ], + "yuqei-infra/scripts/rc06-single-reviewer-signing.py": [ + { + "type": "Base64 High Entropy String", + "filename": "yuqei-infra/scripts/rc06-single-reviewer-signing.py", + "hashed_secret": "1d278d3c888d1a2fa7eed622bfc02927ce4049af", + "line_number": 970, + "is_secret": false, + "audit_reason": "Complete Base64 alphabet used by the parser; not encoded secret material." + } + ], + "yuqei-infra/scripts/run-object-storage-runtime-probe.py": [ + { + "type": "Base64 High Entropy String", + "filename": "yuqei-infra/scripts/run-object-storage-runtime-probe.py", + "hashed_secret": "f112b4832d4595fcd58cf7b485accf6901780cf9", + "line_number": 205, + "is_secret": false, + "audit_reason": "Fixed public probe-only password: fresh temporary volume/container, internal Docker network, no published port, and cleanup; never production configuration." + } + ], + "yuqei-infra/tests/test_p1_07_6_isolated_uat.py": [ + { + "type": "Secret Keyword", + "filename": "yuqei-infra/tests/test_p1_07_6_isolated_uat.py", + "hashed_secret": "e3b7648864c4a1d4fe10f895f8269890f59cafc0", + "line_number": 24, + "is_secret": false, + "audit_reason": "Explicit synthetic UAT object-storage password in a configuration fixture." + } + ], + "yuqei-infra/tests/test_rc06_release_trust_bootstrap.py": [ + { + "type": "Private Key", + "filename": "yuqei-infra/tests/test_rc06_release_trust_bootstrap.py", + "hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9", + "line_number": 668, + "is_secret": false, + "audit_reason": "PEM header text in a negative assertion that protected bytes must not contain a plaintext private key." + } ] } }