Fixing more false positives

strtgbb · strtgbb · commit 758bda364746 · 2025-04-03T20:28:06.000-04:00
diff --git a/tests/ci/s3_helper.py b/tests/ci/s3_helper.py
@@ -21,7 +21,7 @@
 )
 
 sensitive_var_pattern = re.compile(
-    r"\b[A-Z_]*(SECRET|PASSWORD|ACCESS_KEY|TOKEN)[A-Z_]*\b(?!=clickhouse$)(?!: \*{3}$)(?! '\[HIDDEN\]')(?!%)"
+    r"\b[A-Z_]*(?<!WRONG_)(SECRET|PASSWORD|ACCESS_KEY|TOKEN)[A-Z_]*\b(?!%)(?!=clickhouse$)(?!=minio)(?!: \*{3}$)(?! '\[HIDDEN\]')"
 )
 sensitive_strings = {
     var: value for var, value in os.environ.items() if sensitive_var_pattern.match(var)

Original file line number	Diff line number	Diff line change
`@@ -21,7 +21,7 @@`
`21`	`21`	`)`
`22`	`22`
`23`	`23`	`sensitive_var_pattern = re.compile(`
`24`		`- r"\b[A-Z_](SECRET\|PASSWORD\|ACCESS_KEY\|TOKEN)[A-Z_]\b(?!=clickhouse$)(?!: \*{3}$)(?! '\[HIDDEN\]')(?!%)"`
	`24`	`+ r"\b[A-Z_](?<!WRONG_)(SECRET\|PASSWORD\|ACCESS_KEY\|TOKEN)[A-Z_]\b(?!%)(?!=clickhouse$)(?!=minio)(?!: \*{3}$)(?! '\[HIDDEN\]')"`
`25`	`25`	`)`
`26`	`26`	`sensitive_strings = {`
`27`	`27`	`var: value for var, value in os.environ.items() if sensitive_var_pattern.match(var)`