Orchestrata Ultimate › Tests › Reference › scripts › test_check_secret_leaks
Tests reference — tests/scripts/test_check_secret_leaks.py
Module of tests/scripts, split out because the directory page would be too large.
Prose pending.
tests/scripts/test_check_secret_leaks.py
source · 23 tests · 279 lines
| Kind | Name | Line | Description |
|---|---|---|---|
| function | test_name_matches_secret_shaped_names |
99 | |
| function | test_name_matches_rejects_ordinary_names |
106 | |
| function | test_name_tokens_splits_camel_case |
110 | Segmentation is on case boundaries too, not only underscores — otherwise |
| function | test_placeholders_are_not_secrets |
130 | |
| function | test_a_real_looking_value_is_not_a_placeholder |
134 | |
| function | test_vendor_prefixed_value_is_caught_by_shape_under_a_harmless_name |
138 | The shape rule is independent of the name rule. A vendor-prefixed key hidden |
| function | test_a_secret_shaped_name_and_a_vendor_prefix_report_both_rules |
147 | One line, two independent detections — not deduplicated. Recorded because a |
| function | test_extract_literal_strips_quotes |
155 | |
| function | test_tracked_secret_is_reported |
164 | |
| function | test_empty_value_is_not_a_finding |
177 | |
| function | test_placeholder_value_is_not_a_finding |
182 | |
| function | test_ordinary_assignment_is_not_a_finding |
187 | |
| function | test_json_style_entry_is_scanned |
192 | |
| function | test_export_form_is_scanned |
198 | |
| function | test_private_key_header_is_reported |
203 | |
| function | test_waiver_comment_marks_finding_waived |
213 | |
| function | test_untracked_file_is_invisible |
225 | The gate scans what git tracks. An untracked file with a live key is not a |
| function | test_run_check_fails_on_a_tracked_secret |
238 | |
| function | test_run_check_passes_on_a_clean_repo |
247 | |
| function | test_waived_findings_do_not_fail_the_run |
253 | |
| function | test_report_never_carries_the_secret_value |
261 | |
| function | test_run_check_raises_git_error_outside_a_repository |
267 | Not a silent zero. A gate that reports PASS because it could not ask git |
| function | test_oversized_file_is_skipped |
274 | Generated dumps (AST/RTM/coverage JSON) are megabytes of machine output and |