diff --git a/gitleaks-report.json b/gitleaks-report.json new file mode 100644 index 0000000..eb8ad47 --- /dev/null +++ b/gitleaks-report.json @@ -0,0 +1,242 @@ +[ + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 95, + "EndLine": 96, + "StartColumn": 4, + "EndColumn": 1, + "Match": "password: \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "docs/usage/config.md", + "SymlinkFile": "", + "Commit": "efad3da1f3379e42069a9032bf834677ac4c9e9b", + "Entropy": 3.3735573, + "Author": "Haitao Pan", + "Email": "manbuzhe2009@qq.com", + "Date": "2026-01-26T14:21:11Z", + "Message": "docs: add full documentation outline", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "efad3da1f3379e42069a9032bf834677ac4c9e9b:docs/usage/config.md:hashicorp-tf-password:95" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 49, + "EndLine": 50, + "StartColumn": 4, + "EndColumn": 1, + "Match": "password: \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "config/account.cloudrun.yaml", + "SymlinkFile": "", + "Commit": "e72b37e7bef1609c4c381c97ed9ae9990c8d575e", + "Entropy": 3.3735573, + "Author": "Haitao Pan", + "Email": "manbuzhe2009@qq.com", + "Date": "2026-01-23T15:32:41Z", + "Message": "chore: adapt cloud run + stunnel client config", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "e72b37e7bef1609c4c381c97ed9ae9990c8d575e:config/account.cloudrun.yaml:hashicorp-tf-password:49" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 46, + "EndLine": 47, + "StartColumn": 4, + "EndColumn": 1, + "Match": "password: \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "deploy/docker-compose/config/account.yaml", + "SymlinkFile": "", + "Commit": "967576dfb1a6abd74bb116f0dd69dcd833f15574", + "Entropy": 3.3735573, + "Author": "cloudneutral", + "Email": "haitaopanhq@gmail.com", + "Date": "2025-12-06T03:11:20Z", + "Message": "Rebuild docker-compose stack for XControl (#754)", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "967576dfb1a6abd74bb116f0dd69dcd833f15574:deploy/docker-compose/config/account.yaml:hashicorp-tf-password:46" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 206, + "EndLine": 207, + "StartColumn": 5, + "EndColumn": 1, + "Match": "password\": \"password\"", + "Secret": "\"password\"", + "File": "TOKEN_AUTH_MANUAL.md", + "SymlinkFile": "", + "Commit": "b3bdbc1a80228cc6de557b99a04a61f9fcf8a86e", + "Entropy": 2.9219282, + "Author": "Haitao Pan", + "Email": "manbuzhe2009@qq.com", + "Date": "2025-11-05T11:28:23Z", + "Message": "feat(auth): implement token authentication system across services\n\n- Add token service and MFA service to account service\n- Implement auth middleware for request validation\n- Add token-based auth to dashboard and RAG server\n- Update configuration files for auth settings", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "b3bdbc1a80228cc6de557b99a04a61f9fcf8a86e:TOKEN_AUTH_MANUAL.md:hashicorp-tf-password:206" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 516, + "EndLine": 517, + "StartColumn": 5, + "EndColumn": 1, + "Match": "password\": \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "dashboard-fresh/docs/LOGIN_API_GUIDE.md", + "SymlinkFile": "", + "Commit": "66721ea54ac9cf407b0873d30dfdc0a1bc0116a2", + "Entropy": 3.3735573, + "Author": "Haitao Pan", + "Email": "manbuzhe2009@qq.com", + "Date": "2025-11-05T05:07:58Z", + "Message": "feat(dashboard-fresh): implement multi-step login API and Deno native runtime config\n\n - Add step-based login flow (check_email, login, verify_mfa)\n - Create Deno native runtime configuration loader\n - Fix all component imports to include file extensions\n - Add comprehensive API documentation", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "66721ea54ac9cf407b0873d30dfdc0a1bc0116a2:dashboard-fresh/docs/LOGIN_API_GUIDE.md:hashicorp-tf-password:516" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 45, + "EndLine": 46, + "StartColumn": 4, + "EndColumn": 1, + "Match": "password: \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "scripts/install_exim_sendonly.md", + "SymlinkFile": "", + "Commit": "f8c2c8c175c4b05ae16bb752b4d35ec66698b704", + "Entropy": 3.3735573, + "Author": "Haitao Pan", + "Email": "manbuzhe2008@gmail.com", + "Date": "2025-11-01T04:15:29Z", + "Message": "scripts: add install_exim_sendonly and install_opensmtpd_sendonly", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "f8c2c8c175c4b05ae16bb752b4d35ec66698b704:scripts/install_exim_sendonly.md:hashicorp-tf-password:45" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 128, + "EndLine": 129, + "StartColumn": 4, + "EndColumn": 1, + "Match": "password: \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "scripts/install_exim_sendonly.md", + "SymlinkFile": "", + "Commit": "f8c2c8c175c4b05ae16bb752b4d35ec66698b704", + "Entropy": 3.3735573, + "Author": "Haitao Pan", + "Email": "manbuzhe2008@gmail.com", + "Date": "2025-11-01T04:15:29Z", + "Message": "scripts: add install_exim_sendonly and install_opensmtpd_sendonly", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "f8c2c8c175c4b05ae16bb752b4d35ec66698b704:scripts/install_exim_sendonly.md:hashicorp-tf-password:128" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 49, + "EndLine": 50, + "StartColumn": 4, + "EndColumn": 1, + "Match": "password: \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "account/config/account-server.yaml", + "SymlinkFile": "", + "Commit": "7a4b2f0e00208d60909c2bfdede709d9e62abc70", + "Entropy": 3.3735573, + "Author": "shenlan", + "Email": "manbuzhe2009@qq.com", + "Date": "2025-10-27T13:02:03Z", + "Message": "Allow combined server and agent mode (#595)", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "7a4b2f0e00208d60909c2bfdede709d9e62abc70:account/config/account-server.yaml:hashicorp-tf-password:49" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 1112, + "EndLine": 1113, + "StartColumn": 3, + "EndColumn": 1, + "Match": "password := \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "account/api/api_test.go", + "SymlinkFile": "", + "Commit": "4ecdd78272eec1b0ef60ab30266b673ead0bc578", + "Entropy": 2.8638263, + "Author": "shenlan", + "Email": "manbuzhe2009@qq.com", + "Date": "2025-10-07T00:53:16Z", + "Message": "Add admin user metrics endpoint (#444)", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "4ecdd78272eec1b0ef60ab30266b673ead0bc578:account/api/api_test.go:hashicorp-tf-password:1112" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 1201, + "EndLine": 1202, + "StartColumn": 3, + "EndColumn": 1, + "Match": "password := \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "account/api/api_test.go", + "SymlinkFile": "", + "Commit": "4ecdd78272eec1b0ef60ab30266b673ead0bc578", + "Entropy": 3.4316235, + "Author": "shenlan", + "Email": "manbuzhe2009@qq.com", + "Date": "2025-10-07T00:53:16Z", + "Message": "Add admin user metrics endpoint (#444)", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "4ecdd78272eec1b0ef60ab30266b673ead0bc578:account/api/api_test.go:hashicorp-tf-password:1201" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 33, + "EndLine": 34, + "StartColumn": 4, + "EndColumn": 1, + "Match": "password: \"scrubbed\"", + "Secret": "\"scrubbed\"", + "File": "account/config/account.yaml", + "SymlinkFile": "", + "Commit": "7344fdb31ecbf94b42895b707dbd062711945a87", + "Entropy": 3.3735573, + "Author": "shenlan", + "Email": "manbuzhe2009@qq.com", + "Date": "2025-10-02T09:56:30Z", + "Message": "feat(account): add email verification and password reset (#378)", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "7344fdb31ecbf94b42895b707dbd062711945a87:account/config/account.yaml:hashicorp-tf-password:33" + }, + { + "Description": "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.", + "StartLine": 49, + "EndLine": 49, + "StartColumn": 4, + "EndColumn": 29, + "Match": "password: \"scrubbed\" ", + "Secret": "\"scrubbed\"", + "File": "docs/account-service-configuration.md", + "SymlinkFile": "", + "Commit": "7344fdb31ecbf94b42895b707dbd062711945a87", + "Entropy": 3.3735573, + "Author": "shenlan", + "Email": "manbuzhe2009@qq.com", + "Date": "2025-10-02T09:56:30Z", + "Message": "feat(account): add email verification and password reset (#378)", + "Tags": [], + "RuleID": "hashicorp-tf-password", + "Fingerprint": "7344fdb31ecbf94b42895b707dbd062711945a87:docs/account-service-configuration.md:hashicorp-tf-password:49" + } +]