Skip to content

Fix: replace hardcoded invalid API key literals in retry test (Snyk) - #397

Merged
reeshika-h merged 5 commits into
masterfrom
fix/snyk-hardcoded-secrets-tests
Nov 2, 2026
Merged

Fix: replace hardcoded invalid API key literals in retry test (Snyk)#397
reeshika-h merged 5 commits into
masterfrom
fix/snyk-hardcoded-secrets-tests

Conversation

@reeshika-h

@reeshika-h reeshika-h commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Summary

Resolves DX-22030 and DX-22031 (hardcoded non-cryptographic secret in a retry test). The two invalid-key literals are now the placeholder INVALID_API_KEY. Test-only; no version bump.

Verification

  • snyk code test: 2 → 0; snyk test: 0.
  • The file is a live integration test, so it was syntax-checked only.

🤖 Generated with Claude Code

harshithad0703 and others added 4 commits June 1, 2026 13:36
@harshithad0703
Merge pull request #389 from contentstack/master
1f054e3 
chore: back-merge master into development
@harshithad0703
Merge pull request #391 from contentstack/master
2228dc8 
chore: back-merge master into development
@naman-contentstack
Merge pull request #394 from contentstack/master
881e6eb 
chore: back-merge master into development
@reeshika-h @claude
Fix: use approved placeholder in retry test
fcea616 
Use the INVALID_API_KEY placeholder for the invalid-key literals.

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
@snyk-io

snyk-io Bot commented Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

cs-raj
cs-raj previously approved these changes Oct 30, 2026
View reviewed changes
@reeshika-h
reeshika-h changed the base branch from development to master November 2, 2026 05:53
@reeshika-h
reeshika-h dismissed cs-raj’s stale review November 2, 2026 05:53

The base branch was changed.

@reeshika-h
reeshika-h requested a review from a team as a code owner November 2, 2026 05:53
@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 0 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

✅ BUILD PASSED - All security checks passed

@reeshika-h
reeshika-h merged commit f30025e into master Nov 2, 2026
11 checks passed
@reeshika-h
reeshika-h deleted the fix/snyk-hardcoded-secrets-tests branch November 2, 2026 09:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cs-raj cs-raj cs-raj approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@reeshika-h @cs-raj @harshithad0703 @naman-contentstack