chore: Add gitleaks secret scanning report.

This commit is contained in:
Haitao Pan 2026-02-06 12:11:39 +08:00
parent df6f1dd92b
commit a705f16cbb

242
gitleaks-report.json Normal file
View File

@ -0,0 +1,242 @@
[
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 95,
"EndLine": 96,
"StartColumn": 4,
"EndColumn": 1,
"Match": "password: \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "docs/usage/config.md",
"SymlinkFile": "",
"Commit": "efad3da1f3379e42069a9032bf834677ac4c9e9b",
"Entropy": 3.3735573,
"Author": "Haitao Pan",
"Email": "manbuzhe2009@qq.com",
"Date": "2026-01-26T14:21:11Z",
"Message": "docs: add full documentation outline",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "efad3da1f3379e42069a9032bf834677ac4c9e9b:docs/usage/config.md:hashicorp-tf-password:95"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 49,
"EndLine": 50,
"StartColumn": 4,
"EndColumn": 1,
"Match": "password: \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "config/account.cloudrun.yaml",
"SymlinkFile": "",
"Commit": "e72b37e7bef1609c4c381c97ed9ae9990c8d575e",
"Entropy": 3.3735573,
"Author": "Haitao Pan",
"Email": "manbuzhe2009@qq.com",
"Date": "2026-01-23T15:32:41Z",
"Message": "chore: adapt cloud run + stunnel client config",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "e72b37e7bef1609c4c381c97ed9ae9990c8d575e:config/account.cloudrun.yaml:hashicorp-tf-password:49"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 46,
"EndLine": 47,
"StartColumn": 4,
"EndColumn": 1,
"Match": "password: \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "deploy/docker-compose/config/account.yaml",
"SymlinkFile": "",
"Commit": "967576dfb1a6abd74bb116f0dd69dcd833f15574",
"Entropy": 3.3735573,
"Author": "cloudneutral",
"Email": "haitaopanhq@gmail.com",
"Date": "2025-12-06T03:11:20Z",
"Message": "Rebuild docker-compose stack for XControl (#754)",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "967576dfb1a6abd74bb116f0dd69dcd833f15574:deploy/docker-compose/config/account.yaml:hashicorp-tf-password:46"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 206,
"EndLine": 207,
"StartColumn": 5,
"EndColumn": 1,
"Match": "password\": \"password\"",
"Secret": "\"password\"",
"File": "TOKEN_AUTH_MANUAL.md",
"SymlinkFile": "",
"Commit": "b3bdbc1a80228cc6de557b99a04a61f9fcf8a86e",
"Entropy": 2.9219282,
"Author": "Haitao Pan",
"Email": "manbuzhe2009@qq.com",
"Date": "2025-11-05T11:28:23Z",
"Message": "feat(auth): implement token authentication system across services\n\n- Add token service and MFA service to account service\n- Implement auth middleware for request validation\n- Add token-based auth to dashboard and RAG server\n- Update configuration files for auth settings",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "b3bdbc1a80228cc6de557b99a04a61f9fcf8a86e:TOKEN_AUTH_MANUAL.md:hashicorp-tf-password:206"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 516,
"EndLine": 517,
"StartColumn": 5,
"EndColumn": 1,
"Match": "password\": \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "dashboard-fresh/docs/LOGIN_API_GUIDE.md",
"SymlinkFile": "",
"Commit": "66721ea54ac9cf407b0873d30dfdc0a1bc0116a2",
"Entropy": 3.3735573,
"Author": "Haitao Pan",
"Email": "manbuzhe2009@qq.com",
"Date": "2025-11-05T05:07:58Z",
"Message": "feat(dashboard-fresh): implement multi-step login API and Deno native runtime config\n\n - Add step-based login flow (check_email, login, verify_mfa)\n - Create Deno native runtime configuration loader\n - Fix all component imports to include file extensions\n - Add comprehensive API documentation",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "66721ea54ac9cf407b0873d30dfdc0a1bc0116a2:dashboard-fresh/docs/LOGIN_API_GUIDE.md:hashicorp-tf-password:516"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 45,
"EndLine": 46,
"StartColumn": 4,
"EndColumn": 1,
"Match": "password: \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "scripts/install_exim_sendonly.md",
"SymlinkFile": "",
"Commit": "f8c2c8c175c4b05ae16bb752b4d35ec66698b704",
"Entropy": 3.3735573,
"Author": "Haitao Pan",
"Email": "manbuzhe2008@gmail.com",
"Date": "2025-11-01T04:15:29Z",
"Message": "scripts: add install_exim_sendonly and install_opensmtpd_sendonly",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "f8c2c8c175c4b05ae16bb752b4d35ec66698b704:scripts/install_exim_sendonly.md:hashicorp-tf-password:45"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 128,
"EndLine": 129,
"StartColumn": 4,
"EndColumn": 1,
"Match": "password: \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "scripts/install_exim_sendonly.md",
"SymlinkFile": "",
"Commit": "f8c2c8c175c4b05ae16bb752b4d35ec66698b704",
"Entropy": 3.3735573,
"Author": "Haitao Pan",
"Email": "manbuzhe2008@gmail.com",
"Date": "2025-11-01T04:15:29Z",
"Message": "scripts: add install_exim_sendonly and install_opensmtpd_sendonly",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "f8c2c8c175c4b05ae16bb752b4d35ec66698b704:scripts/install_exim_sendonly.md:hashicorp-tf-password:128"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 49,
"EndLine": 50,
"StartColumn": 4,
"EndColumn": 1,
"Match": "password: \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "account/config/account-server.yaml",
"SymlinkFile": "",
"Commit": "7a4b2f0e00208d60909c2bfdede709d9e62abc70",
"Entropy": 3.3735573,
"Author": "shenlan",
"Email": "manbuzhe2009@qq.com",
"Date": "2025-10-27T13:02:03Z",
"Message": "Allow combined server and agent mode (#595)",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "7a4b2f0e00208d60909c2bfdede709d9e62abc70:account/config/account-server.yaml:hashicorp-tf-password:49"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 1112,
"EndLine": 1113,
"StartColumn": 3,
"EndColumn": 1,
"Match": "password := \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "account/api/api_test.go",
"SymlinkFile": "",
"Commit": "4ecdd78272eec1b0ef60ab30266b673ead0bc578",
"Entropy": 2.8638263,
"Author": "shenlan",
"Email": "manbuzhe2009@qq.com",
"Date": "2025-10-07T00:53:16Z",
"Message": "Add admin user metrics endpoint (#444)",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "4ecdd78272eec1b0ef60ab30266b673ead0bc578:account/api/api_test.go:hashicorp-tf-password:1112"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 1201,
"EndLine": 1202,
"StartColumn": 3,
"EndColumn": 1,
"Match": "password := \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "account/api/api_test.go",
"SymlinkFile": "",
"Commit": "4ecdd78272eec1b0ef60ab30266b673ead0bc578",
"Entropy": 3.4316235,
"Author": "shenlan",
"Email": "manbuzhe2009@qq.com",
"Date": "2025-10-07T00:53:16Z",
"Message": "Add admin user metrics endpoint (#444)",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "4ecdd78272eec1b0ef60ab30266b673ead0bc578:account/api/api_test.go:hashicorp-tf-password:1201"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 33,
"EndLine": 34,
"StartColumn": 4,
"EndColumn": 1,
"Match": "password: \"scrubbed\"",
"Secret": "\"scrubbed\"",
"File": "account/config/account.yaml",
"SymlinkFile": "",
"Commit": "7344fdb31ecbf94b42895b707dbd062711945a87",
"Entropy": 3.3735573,
"Author": "shenlan",
"Email": "manbuzhe2009@qq.com",
"Date": "2025-10-02T09:56:30Z",
"Message": "feat(account): add email verification and password reset (#378)",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "7344fdb31ecbf94b42895b707dbd062711945a87:account/config/account.yaml:hashicorp-tf-password:33"
},
{
"Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.",
"StartLine": 49,
"EndLine": 49,
"StartColumn": 4,
"EndColumn": 29,
"Match": "password: \"scrubbed\" ",
"Secret": "\"scrubbed\"",
"File": "docs/account-service-configuration.md",
"SymlinkFile": "",
"Commit": "7344fdb31ecbf94b42895b707dbd062711945a87",
"Entropy": 3.3735573,
"Author": "shenlan",
"Email": "manbuzhe2009@qq.com",
"Date": "2025-10-02T09:56:30Z",
"Message": "feat(account): add email verification and password reset (#378)",
"Tags": [],
"RuleID": "hashicorp-tf-password",
"Fingerprint": "7344fdb31ecbf94b42895b707dbd062711945a87:docs/account-service-configuration.md:hashicorp-tf-password:49"
}
]