Skip to content

Commit f159155

Browse files
RamSubbaraopradipkumarrouta
authored and
GitHub Enterprise
committed
Use podman to build images on SPS (#1006)
* Use podman to build images on SPS * Enabled detect secret --------- Co-authored-by: pradipkumarrouta <[email protected]>
1 parent bf40c23 commit f159155

File tree

13 files changed

+472
-113
lines changed

13 files changed

+472
-113
lines changed

‎.pre-commit-config.yaml‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
# © Copyright IBM Corporation 2025
2+
#
3+
# Licensed under the Apache License, Version 2.0 (the "License");
4+
# you may not use this file except in compliance with the License.
5+
# You may obtain a copy of the License at
6+
#
7+
# http://www.apache.org/licenses/LICENSE-2.0
8+
#
9+
# Unless required by applicable law or agreed to in writing, software
10+
# distributed under the License is distributed on an "AS IS" BASIS,
11+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12+
# See the License for the specific language governing permissions and
13+
# limitations under the License.
14+
#
15+
#
16+
# This is a configuration to enable detect-secrets in the pre-commit hook.
17+
# Add this file to the root folder of your repository.
18+
#
19+
#
20+
# This line indicates we will use the hook from ibm/detect-secrets to run scan during committing phase.
21+
repos:
22+
- repo: https://github.com/ibm/detect-secrets
23+
# If you desire to use a specific version of detect-secrets, you can replace `master` with other git revisions such as branch, tag or commit sha.
24+
# You are encouraged to use static refs such as tags, instead of branch name
25+
#
26+
# Running "pre-commit autoupdate" automatically updates rev to latest tag
27+
rev: 0.13.1+ibm.62.dss
28+
hooks:
29+
- id: detect-secrets # pragma: whitelist secret
30+
# Add options for detect-secrets-hook binary. You can run `detect-secrets-hook --help` to list out all possible options.
31+
# You may also run `pre-commit run detect-secrets` to preview the scan result.
32+
# when "--baseline" without "--use-all-plugins", pre-commit scan with just plugins in baseline file
33+
# when "--baseline" with "--use-all-plugins", pre-commit scan with all available plugins
34+
# add "--fail-on-unaudited" to fail pre-commit for unaudited potential secrets
35+
# detect-secrets audit --report --fail-on-unaudited --fail-on-live --fail-on-audited-real .secrets.baseline
36+
args: [--baseline, .secrets.baseline, --use-all-plugins, --fail-on-unaudited]

‎.secrets.baseline‎

Lines changed: 330 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,330 @@
1+
{
2+
"exclude": {
3+
"files": "go.mod|go.sum|go.work.sum|vendor|docs|^.secrets.baseline$",
4+
"lines": null
5+
},
6+
"generated_at": "2025-08-14T09:40:05Z",
7+
"plugins_used": [
8+
{
9+
"name": "AWSKeyDetector"
10+
},
11+
{
12+
"name": "ArtifactoryDetector"
13+
},
14+
{
15+
"name": "AzureStorageKeyDetector"
16+
},
17+
{
18+
"base64_limit": 4.5,
19+
"name": "Base64HighEntropyString"
20+
},
21+
{
22+
"name": "BasicAuthDetector"
23+
},
24+
{
25+
"name": "BoxDetector"
26+
},
27+
{
28+
"name": "CloudantDetector"
29+
},
30+
{
31+
"ghe_instance": "github.ibm.com",
32+
"name": "GheDetector"
33+
},
34+
{
35+
"name": "GitHubTokenDetector"
36+
},
37+
{
38+
"hex_limit": 3,
39+
"name": "HexHighEntropyString"
40+
},
41+
{
42+
"name": "IbmCloudIamDetector"
43+
},
44+
{
45+
"name": "IbmCosHmacDetector"
46+
},
47+
{
48+
"name": "JwtTokenDetector"
49+
},
50+
{
51+
"keyword_exclude": null,
52+
"name": "KeywordDetector"
53+
},
54+
{
55+
"name": "MailchimpDetector"
56+
},
57+
{
58+
"name": "NpmDetector"
59+
},
60+
{
61+
"name": "PrivateKeyDetector"
62+
},
63+
{
64+
"name": "SlackDetector"
65+
},
66+
{
67+
"name": "SoftlayerDetector"
68+
},
69+
{
70+
"name": "SquareOAuthDetector"
71+
},
72+
{
73+
"name": "StripeDetector"
74+
},
75+
{
76+
"name": "TwilioKeyDetector"
77+
}
78+
],
79+
"results": {
80+
"authservice/mqsimpleauth/src/log.c": [
81+
{
82+
"hashed_secret": "9a840b7c5aa3f880beda0f577a2270b10c85f241",
83+
"is_secret": false,
84+
"is_verified": false,
85+
"line_number": 137,
86+
"type": "Secret Keyword",
87+
"verified_result": null
88+
}
89+
],
90+
"authservice/mqsimpleauth/src/simpleauth_test.c": [
91+
{
92+
"hashed_secret": "32dc07f3742ccdbab3a3d44a81afb578a61aafc7",
93+
"is_secret": false,
94+
"is_verified": false,
95+
"line_number": 49,
96+
"type": "Secret Keyword",
97+
"verified_result": null
98+
},
99+
{
100+
"hashed_secret": "347cd9c53ff77d41a7b22aa56c7b4efaf54658e3",
101+
"is_secret": false,
102+
"is_verified": false,
103+
"line_number": 52,
104+
"type": "Secret Keyword",
105+
"verified_result": null
106+
}
107+
],
108+
"internal/securityutility/securityutility.go": [
109+
{
110+
"hashed_secret": "264f39cab871e4cfd65b3a002f7255888bb5ed97",
111+
"is_secret": false,
112+
"is_verified": false,
113+
"line_number": 65,
114+
"type": "Secret Keyword",
115+
"verified_result": null
116+
}
117+
],
118+
"internal/tls/tls.go": [
119+
{
120+
"hashed_secret": "1a91d62f7ca67399625a4368a6ab5d4a3baa6073",
121+
"is_secret": false,
122+
"is_verified": false,
123+
"line_number": 225,
124+
"type": "Secret Keyword",
125+
"verified_result": null
126+
}
127+
],
128+
"internal/tls/tls_web.go": [
129+
{
130+
"hashed_secret": "7636f56d2984bfa35ab8f4c7ea2eafa62f5ec2c0",
131+
"is_secret": false,
132+
"is_verified": false,
133+
"line_number": 55,
134+
"type": "Secret Keyword",
135+
"verified_result": null
136+
}
137+
],
138+
"test/container/devconfig_test.go": [
139+
{
140+
"hashed_secret": "7f1514fb468057823d2707865c6ddaf79853db23",
141+
"is_secret": false,
142+
"is_verified": false,
143+
"line_number": 633,
144+
"type": "Secret Keyword",
145+
"verified_result": null
146+
},
147+
{
148+
"hashed_secret": "bb589d0621e5472f470fa3425a234c74b1e202e8",
149+
"is_secret": false,
150+
"is_verified": false,
151+
"line_number": 811,
152+
"type": "Secret Keyword",
153+
"verified_result": null
154+
},
155+
{
156+
"hashed_secret": "ddea87cd3c2cf74866edec92051a098822b3462d",
157+
"is_secret": false,
158+
"is_verified": false,
159+
"line_number": 814,
160+
"type": "Secret Keyword",
161+
"verified_result": null
162+
},
163+
{
164+
"hashed_secret": "2ace62c1befa19e3ea37dd52be9f6d508c5163e6",
165+
"is_secret": false,
166+
"is_verified": false,
167+
"line_number": 864,
168+
"type": "Secret Keyword",
169+
"verified_result": null
170+
}
171+
],
172+
"test/container/devconfig_test_util.go": [
173+
{
174+
"hashed_secret": "7c6a61c68ef8b9b6b061b28c348bc1ed7921cb53",
175+
"is_secret": false,
176+
"is_verified": false,
177+
"line_number": 104,
178+
"type": "Secret Keyword",
179+
"verified_result": null
180+
},
181+
{
182+
"hashed_secret": "05f2f618cd7da1f73a97c9f6d93bbc4f58cff7bc",
183+
"is_secret": false,
184+
"is_verified": false,
185+
"line_number": 116,
186+
"type": "Secret Keyword",
187+
"verified_result": null
188+
}
189+
],
190+
"test/container/docker_api_test.go": [
191+
{
192+
"hashed_secret": "ddea87cd3c2cf74866edec92051a098822b3462d",
193+
"is_secret": false,
194+
"is_verified": false,
195+
"line_number": 699,
196+
"type": "Secret Keyword",
197+
"verified_result": null
198+
},
199+
{
200+
"hashed_secret": "48fb79103e34daa919f15f307324c31efb078838",
201+
"is_secret": false,
202+
"is_verified": false,
203+
"line_number": 1896,
204+
"type": "Secret Keyword",
205+
"verified_result": null
206+
},
207+
{
208+
"hashed_secret": "7f1514fb468057823d2707865c6ddaf79853db23",
209+
"is_secret": false,
210+
"is_verified": false,
211+
"line_number": 2102,
212+
"type": "Secret Keyword",
213+
"verified_result": null
214+
},
215+
{
216+
"hashed_secret": "2ace62c1befa19e3ea37dd52be9f6d508c5163e6",
217+
"is_secret": false,
218+
"is_verified": false,
219+
"line_number": 2107,
220+
"type": "Secret Keyword",
221+
"verified_result": null
222+
}
223+
],
224+
"test/messaging/src/main/java/com/ibm/mqcontainer/test/JMSTests.java": [
225+
{
226+
"hashed_secret": "347cd9c53ff77d41a7b22aa56c7b4efaf54658e3",
227+
"is_secret": false,
228+
"is_verified": false,
229+
"line_number": 145,
230+
"type": "Secret Keyword",
231+
"verified_result": null
232+
}
233+
],
234+
"test/tls/generate-test-cert.sh": [
235+
{
236+
"hashed_secret": "7c6a61c68ef8b9b6b061b28c348bc1ed7921cb53",
237+
"is_secret": false,
238+
"is_verified": false,
239+
"line_number": 20,
240+
"type": "Secret Keyword",
241+
"verified_result": null
242+
}
243+
],
244+
"test/tls/server.key": [
245+
{
246+
"hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9",
247+
"is_secret": false,
248+
"is_verified": false,
249+
"line_number": 1,
250+
"type": "Private Key",
251+
"verified_result": null
252+
}
253+
],
254+
"test/tlscacert/rootcakey.pem": [
255+
{
256+
"hashed_secret": "be4fc4886bd949b369d5e092eb87494f12e57e5b",
257+
"is_secret": false,
258+
"is_verified": false,
259+
"line_number": 1,
260+
"type": "Private Key",
261+
"verified_result": null
262+
}
263+
],
264+
"test/tlscacert/server.key": [
265+
{
266+
"hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9",
267+
"is_secret": false,
268+
"is_verified": false,
269+
"line_number": 1,
270+
"type": "Private Key",
271+
"verified_result": null
272+
}
273+
],
274+
"test/tlsdifferentsubdn/difsubdn.key": [
275+
{
276+
"hashed_secret": "be4fc4886bd949b369d5e092eb87494f12e57e5b",
277+
"is_secret": false,
278+
"is_verified": false,
279+
"line_number": 1,
280+
"type": "Private Key",
281+
"verified_result": null
282+
}
283+
],
284+
"test/tlsintermediateca/ibmmq.key": [
285+
{
286+
"hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9",
287+
"is_secret": false,
288+
"is_verified": false,
289+
"line_number": 1,
290+
"type": "Private Key",
291+
"verified_result": null
292+
}
293+
],
294+
"test/tlsnocert/server.key": [
295+
{
296+
"hashed_secret": "1348b145fa1a555461c1b790a2f66614781091e9",
297+
"is_secret": false,
298+
"is_verified": false,
299+
"line_number": 1,
300+
"type": "Private Key",
301+
"verified_result": null
302+
}
303+
],
304+
"test/tlssamesubdn/samesubdn.key": [
305+
{
306+
"hashed_secret": "be4fc4886bd949b369d5e092eb87494f12e57e5b",
307+
"is_secret": false,
308+
"is_verified": false,
309+
"line_number": 1,
310+
"type": "Private Key",
311+
"verified_result": null
312+
}
313+
],
314+
"web/installations/Installation1/servers/mqweb/tls.xml.tpl": [
315+
{
316+
"hashed_secret": "d2e2ab0f407e4ee3cf2ab87d61c31b25a74085e5",
317+
"is_secret": false,
318+
"is_verified": false,
319+
"line_number": 4,
320+
"type": "Secret Keyword",
321+
"verified_result": null
322+
}
323+
]
324+
},
325+
"version": "0.13.1+ibm.62.dss",
326+
"word_list": {
327+
"file": null,
328+
"hash": null
329+
}
330+
}

0 commit comments

Comments
 (0)