test(fastlane): pin historical scanner false-positive

2026-08-02 17:02:34 +08:00
parent d9f7c3cadc
commit cb03cef9a3
2 changed files with 16 additions and 0 deletions
@@ -0,0 +1,2 @@
+# Exact historical fingerprint for the removed test-only scanner self-reference.
+a42f16d4f73b11fd23448da2711d49d5e9f49d9e:tests/fastlane/test_fastlane_assets_contract.py:generic-api-key:135
@@ -136,6 +136,20 @@ class FastlaneAssetContractTests(unittest.TestCase):
        self.assertIn('shadow-rbac-idempotent-v1', config)
        self.assertNotIn('disabledRules', config)

+    def test_gitleaks_history_ignore_is_one_exact_false_positive_fingerprint(self) -> None:
+        entries = [
+            line
+            for line in (ROOT / ".gitleaksignore").read_text(encoding="utf-8").splitlines()
+            if line and not line.startswith("#")
+        ]
+        self.assertEqual(
+            entries,
+            [
+                "a42f16d4f73b11fd23448da2711d49d5e9f49d9e:"
+                "tests/fastlane/test_fastlane_assets_contract.py:generic-api-key:135"
+            ],
+        )
+
    def test_bootstrap_route_is_explicitly_superseded_without_history_rewrite(self) -> None:
        record = json.loads(
            (ROOT / "docs" / "releases" / "V2R1C4" / "FASTLANE-SUPERSESSION.json").read_text(