Show gutter icon only on first line of multi-line ignored secrets (AST-128760)

[cx-rahul-pidde]

PR Description

🐛 Problem

When ignoring multi-line secrets (e.g., RSA private keys, AWS credentials), the ignored gutter icon was appearing on every line of the secret, creating visual clutter and inconsistent behavior.

Example of the issue:

🔕 PRIVATE_KEY = """
🔕 -----BEGIN RSA PRIVATE KEY-----
🔕 MIIEpAIBAAKCAQEA7v8wF+SECRETKEYEXAMPLE
🔕 -----END RSA PRIVATE KEY-----
🔕 """

✅ Solution

Modified the secrets scanner service to display the ignored gutter icon only on the first line of multi-line secrets, while preserving hover data for all lines.

After the fix:

🔕 PRIVATE_KEY = """
   -----BEGIN RSA PRIVATE KEY-----
   MIIEpAIBAAKCAQEA7v8wF+SECRETKEYEXAMPLE
   -----END RSA PRIVATE KEY-----
   """

🔧 Changes Made

File: src/realtimeScanners/scanners/secrets/secretsScannerService.ts

• Lines 128-160: Modified ignored decoration logic
  • Changed from creating decorations for all lines to only the first line
  • Ensures consistency with non-ignored secrets behavior (which also only show icons on the first line)

Follows VS Code conventions*: Gutter icons typically appear once per issue

🧪 Testing

Manual Testing:

1. Open a file with a multi-line secret (e.g., RSA private key)
2. Ignore the secret using the code action or AI chat
3. Verify the ignored icon appears only on the first line
4. Hover over any line of the secret to verify hover data is preserved

Test Cases

Test Case 1: Multi-line RSA Private Key - Ignored

Preconditions:

• Secrets scanner is enabled
• File contains a multi-line RSA private key

Test Data:

PRIVATE_KEY = """
-----BEGIN RSA PRIVATE KEY-----
MIIEpAIBAAKCAQEA7v8wF+SECRETKEYEXAMPLE+QIDAQABAoIBAQC0
-----END RSA PRIVATE KEY-----
"""

Steps:

1. Open the file in VS Code
2. Wait for secrets scanner to detect the secret
3. Right-click on the secret → "Ignore this secret"
4. Observe the gutter icons

Expected Result:

• ✅ Ignored icon (🔕) appears only on the first line (PRIVATE_KEY = """)
• ✅ No icons on lines 2-5
• ✅ Hovering over any line shows the ignored secret details

Actual Result (Before Fix):

• ❌ Ignored icon appears on all 5 lines

---

Test Case 2: Single-line Secret - Ignored

Test Data:

API_KEY = "ghp_1234567890abcdef1234567890abcdef12345678"

Steps:

1. Open the file
2. Ignore the secret
3. Observe the gutter icon

Expected Result:

• ✅ Ignored icon appears on the single line
• ✅ Behavior unchanged from before

[github-actions]

Checkmarx One – Scan Summary & Details – 7bf9a7e0-b096-4f76-89a3-e47d74b50c04

Great job! No new security vulnerabilities introduced in this pull request