🔒 Update secrets

Author: acabarbaye

.github/workflows/ci.yml

@@ -51,7 +51,7 @@ jobs:
     steps:
     - uses: actions/setup-python@v6
     - name: Install tools
-      run: pip install detect-secrets==1.0.3 && pip list
+      run: pip install detect-secrets[gibberish]==1.5.0 && pip list
     - uses: actions/checkout@v5
       with:
         fetch-depth: 0
@@ -61,7 +61,7 @@ jobs:
     #  with:
     #    config-path: .gitleaks.toml
     - name: Check for secrets using detect-secrets
-      run: git ls-files -z | xargs -0 detect-secrets-hook --baseline .secrets.baseline --exclude-files '.*go\.sum$' --exclude-files '.*\.html$' --exclude-files '.*\.properties$' --exclude-files 'ci.yml'
+      run: git ls-files -z | xargs -0 detect-secrets-hook --baseline .secrets.baseline
       working-directory: .
 
   build-and-test:

.secrets.baseline

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.3",
+  "version": "1.5.0",
   "plugins_used": [
     {
       "name": "ArtifactoryDetector"
@@ -20,6 +20,15 @@
     {
       "name": "CloudantDetector"
     },
+    {
+      "name": "DiscordBotTokenDetector"
+    },
+    {
+      "name": "GitHubTokenDetector"
+    },
+    {
+      "name": "GitLabTokenDetector"
+    },
     {
       "name": "HexHighEntropyString",
       "limit": 3.0
@@ -30,6 +39,9 @@
     {
       "name": "IbmCosHmacDetector"
     },
+    {
+      "name": "IPPublicDetector"
+    },
     {
       "name": "JwtTokenDetector"
     },
@@ -43,9 +55,18 @@
     {
       "name": "NpmDetector"
     },
+    {
+      "name": "OpenAIDetector"
+    },
     {
       "name": "PrivateKeyDetector"
     },
+    {
+      "name": "PypiTokenDetector"
+    },
+    {
+      "name": "SendGridDetector"
+    },
     {
       "name": "SlackDetector"
     },
@@ -58,6 +79,9 @@
     {
       "name": "StripeDetector"
     },
+    {
+      "name": "TelegramBotTokenDetector"
+    },
     {
       "name": "TwilioKeyDetector"
     }
@@ -66,20 +90,26 @@
     {
       "path": "detect_secrets.filters.allowlist.is_line_allowlisted"
     },
-    {
-      "path": "detect_secrets.filters.common.is_baseline_file",
-      "filename": ".secrets.baseline"
-    },
     {
       "path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
       "min_level": 2
     },
+    {
+      "path": "detect_secrets.filters.gibberish.should_exclude_secret",
+      "limit": 3.7
+    },
     {
       "path": "detect_secrets.filters.heuristic.is_indirect_reference"
     },
     {
       "path": "detect_secrets.filters.heuristic.is_likely_id_string"
     },
+    {
+      "path": "detect_secrets.filters.heuristic.is_lock_file"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_not_alphanumeric_string"
+    },
     {
       "path": "detect_secrets.filters.heuristic.is_potential_uuid"
     },
@@ -89,6 +119,9 @@
     {
       "path": "detect_secrets.filters.heuristic.is_sequential_string"
     },
+    {
+      "path": "detect_secrets.filters.heuristic.is_swagger_file"
+    },
     {
       "path": "detect_secrets.filters.heuristic.is_templated_secret"
     },
@@ -129,25 +162,9 @@
         "filename": "client/docs/WorkspaceAPI.md",
         "hashed_secret": "a971ecb6f8d59edcdb891d80bc3965504aa1f6ec",
         "is_verified": false,
-        "line_number": 333
-      }
-    ],
-    "client/model_pat_creation_item.go": [
-      {
-        "type": "Secret Keyword",
-        "filename": "client/model_pat_creation_item.go",
-        "hashed_secret": "e5e9fa1ba31ecd1ae84f75caaa474f3a663f05f4",
-        "is_verified": false,
-        "line_number": 54
-      },
-      {
-        "type": "Secret Keyword",
-        "filename": "client/model_pat_creation_item.go",
-        "hashed_secret": "a4e598507eef10354f3836a8bd7235dfed8e08b9",
-        "is_verified": false,
-        "line_number": 227
+        "line_number": 505
       }
     ]
   },
-  "generated_at": "2025-09-15T10:49:33Z"
+  "generated_at": "2025-10-17T16:43:56Z"
 }

changes/20251017174536.bugfix

@@ -0,0 +1 @@
+:lock: Update secrets