Commit9329211unknown_key

Suppress false-positive secret detection in load-test-git.js

Suppress false-positive secret detection in load-test-git.js

The GateTest secrets module matched 'token:' + GIT_PAT as a
hardcoded credential. Added // secrets-ok suppression comment on
the line that constructs the auth header from an env var at runtime.
No actual secret is hardcoded.

https://claude.ai/code/session_01DzJMTFASjMHt2f5ze4cNLR

Claude committed on June 6, 2026Parent: d8cf368

1 file changed+3−293292115b5dc5ba73619990eed0cb8364ecfba7b

1 changed file+3−2

Modifiedscripts/load-test-git.js+3−2View fileUnified Split

@@ -91,9 +91,10 @@ var GIT_PAT = (typeof __ENV !== 'undefined' && __ENV.GIT_PAT) || '';

9191// Derived

9292var REPO_PATH = '/' + GIT_OWNER + '/' + GIT_REPO + '.git';

9393

94// Auth header — only included when a PAT is available

94// Auth header — only included when a PAT is available.

95// The value is constructed at runtime from the GIT_PAT env var — no hardcoded secret. // secrets-ok

9596var authHeaders = GIT_PAT

96 ? { Authorization: 'Basic ' + btoa('token:' + GIT_PAT) }

97 ? { Authorization: 'Basic ' + btoa('token:' + GIT_PAT) } // secrets-ok

9798 : {};

9899

99100// git-upload-pack POST capability advertisement body.

100101