LGTM.com - false positive from go/hardcoded-credentials
未關閉
acknowledged
backlog
false-positive
Go
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
go/hardcoded-credentials triggers on non-secret names of Google Cloud secrets, if the name contains the term 'Secret'. These are basically well-known keys; it's the values owned by the Secrets system's KV store that are actually secret.
Reproduce this by going to
https://lgtm.com/query/2938151591646296588/
and running it on
https://github.com/knative/pkg
貢獻指南
評估
這個 Issue 還沒有評估資料。