Skip to content

Commit 5ebe59d

Browse files
reeshika-hclaude
andcommitted
fix: suppress false-positive Snyk hardcoded-password finding in TestError
Snyk Code flagged the dummy test fixture value as a hardcoded password (CWE-798). Annotate it with a deepcode ignore comment since it's a test value, not a real credential. Verified with snyk code test and trufflehog that no active/real secrets remain. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
1 parent 0a84b92 commit 5ebe59d

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

contentstack/src/test/java/com/contentstack/sdk/TestError.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -283,6 +283,7 @@ public void testNetworkErrorScenario() {
283283
public void testValidationErrorScenario() {
284284
HashMap<String, Object> validationErrors = new HashMap<>();
285285
validationErrors.put("email", "Invalid email format");
286+
// deepcode ignore HardcodedPassword: test fixture value, not a real secret
286287
validationErrors.put("password", "Password too short");
287288

288289
error.setErrorMessage("Validation failed");

0 commit comments

Comments
 (0)