@@ -19,60 +19,7 @@ repos:
1919args: [--maxkb=500]
2020 - id: check-merge-conflict
2121 - id: detect-private-key
22-exclude: '(^|/)(\.secrets\.baseline$|\.detect-secrets\.cfg$|\.pre-commit-config\.yaml$|apps/ios/fastlane/Fastfile$|.*\.test\.ts$)'
23-24-# Secret detection (same as CI)
25- - repo: https://github.com/Yelp/detect-secrets
26-rev: v1.5.0
27-hooks:
28- - id: detect-secrets
29-args:
30- - --baseline
31- - .secrets.baseline
32- - --exclude-files
33- - '(^|/)pnpm-lock\.yaml$'
34- - --exclude-lines
35- - 'key_content\.include\?\("BEGIN PRIVATE KEY"\)'
36- - --exclude-lines
37- - 'case \.apiKeyEnv: "API key \(env var\)"'
38- - --exclude-lines
39- - 'case apikey = "apiKey"'
40- - --exclude-lines
41- - '"gateway\.remote\.password"'
42- - --exclude-lines
43- - '"gateway\.auth\.password"'
44- - --exclude-lines
45- - '"talk\.apiKey"'
46- - --exclude-lines
47- - '=== "string"'
48- - --exclude-lines
49- - 'typeof remote\?\.password === "string"'
50- - --exclude-lines
51- - "OPENCLAW_DOCKER_GPG_FINGERPRINT="
52- - --exclude-lines
53- - '"secretShape": "(secret_input|sibling_ref)"'
54- - --exclude-lines
55- - 'API key rotation \(provider-specific\): set `\*_API_KEYS`'
56- - --exclude-lines
57- - 'password: `OPENCLAW_GATEWAY_PASSWORD` -> `gateway\.auth\.password` -> `gateway\.remote\.password`'
58- - --exclude-lines
59- - 'password: `OPENCLAW_GATEWAY_PASSWORD` -> `gateway\.remote\.password` -> `gateway\.auth\.password`'
60- - --exclude-files
61- - '^src/gateway/client\.watchdog\.test\.ts$'
62- - --exclude-lines
63- - 'export CUSTOM_API_K[E]Y="your-key"'
64- - --exclude-lines
65- - 'grep -q ''N[O]DE_COMPILE_CACHE=/var/tmp/openclaw-compile-cache'' ~/.bashrc \|\| cat >> ~/.bashrc <<''EOF'''
66- - --exclude-lines
67- - 'env: \{ MISTRAL_API_K[E]Y: "sk-\.\.\." \},'
68- - --exclude-lines
69- - '"ap[i]Key": "xxxxx"(,)?'
70- - --exclude-lines
71- - 'ap[i]Key: "A[I]za\.\.\.",'
72- - --exclude-lines
73- - '"ap[i]Key": "(resolved|normalized|legacy)-key"(,)?'
74- - --exclude-lines
75- - 'sparkle:edSignature="[A-Za-z0-9+/=]+"'
22+exclude: '(^|/)(\.pre-commit-config\.yaml$|apps/ios/fastlane/Fastfile$|.*\.test\.ts$)'
7623# Shell script linting
7724 - repo: https://github.com/koalaman/shellcheck-precommit
7825rev: v0.11.0
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。