Bug: Issue auto-closes when password or secret detected by security automation

Open
#138 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Stale
Tech stack
github-actions
Domain
ci-cd, security

Research direction

Start by reviewing the attached publish-workspace.yml and the repository's bots, actions, secret-scanning, and other automation rules. Reproduce the behavior with a security-related issue description, identify which automation closes or blocks it, and document a way to report genuine concerns without false positives.

Written by the indexing model from the issue text.

Description

bug
Describe the bug

When submitting issues in the supabase/splinter repository, they are automatically closed or blocked if the text contains references that are flagged as passwords or secrets—even if no credential is actually exposed. This prevents me from keeping my security-related issues open for review. This might be due to automated bots, GitHub secret scanning, GitGuardian, or repository-specific workflow rules.

To Reproduce
  1. Open a new issue and describe a concern involving passwords or secrets.
  2. Observe that the issue closes automatically or is blocked from submission.
Expected behavior

Issues regarding security concerns should not be auto-closed unless a real, exposed secret is detected. Accurate reporting should be possible without triggering false positives.

Additional context
  • Please review repository automation (bots, actions, scanners) for strict secret detection and provide guidelines to avoid false positives.
  • publish-workspace.yml
Dominant language
PLpgSQL
Stars
275
Forks
102
Avg merge
2d 8h
Merged PRs (30d)
3

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from supabase/splinter

All issues in supabase/splinter

Similar issues

More DevOps issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.