From a9a4733426b8a2f3c91a55738411a29ff4d01bda Mon Sep 17 00:00:00 2001 From: reeshika-h Date: Wed, 22 Jul 2026 14:44:00 +0530 Subject: [PATCH 1/2] fix: add comments to ignore deepcode warnings for hardcoded test API keys in retry logic tests --- test/integration/NetworkResilienceTests/RetryLogic.test.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/test/integration/NetworkResilienceTests/RetryLogic.test.js b/test/integration/NetworkResilienceTests/RetryLogic.test.js index 6d6f69198..d23b86288 100644 --- a/test/integration/NetworkResilienceTests/RetryLogic.test.js +++ b/test/integration/NetworkResilienceTests/RetryLogic.test.js @@ -270,6 +270,7 @@ describe('Retry Logic & Network Resilience - Comprehensive Tests', () => { describe('Error Scenarios', () => { test('Error_InvalidAPIKey_FailsWithoutRetry', async () => { const localStack = Contentstack.Stack({ + // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret api_key: 'invalid_api_key_12345', delivery_token: config.stack.delivery_token, environment: config.stack.environment, @@ -436,6 +437,7 @@ describe('Retry Logic & Network Resilience - Comprehensive Tests', () => { const RETRY_LIMIT = 5; const localStack = Contentstack.Stack({ + // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret api_key: 'invalid_api_key_for_timing_test', delivery_token: config.stack.delivery_token, environment: config.stack.environment, From 2f15245f45af801e5ddfa175f7a73b7fdaedf1d9 Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Sun, 2 Aug 2026 17:44:55 +0530 Subject: [PATCH 2/2] sca-scan.yml --- .github/workflows/sca-scan.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/sca-scan.yml b/.github/workflows/sca-scan.yml index 2307d4890..79b655754 100644 --- a/.github/workflows/sca-scan.yml +++ b/.github/workflows/sca-scan.yml @@ -5,6 +5,9 @@ on: jobs: security-sca: runs-on: ubuntu-latest + permissions: + contents: read + pull-requests: write steps: - uses: actions/checkout@master - name: Run Snyk to check for vulnerabilities