From 84b34093e3c594f999d72abc15f46ec66a816b26 Mon Sep 17 00:00:00 2001 From: reeshika-h Date: Wed, 22 Jul 2026 14:44:00 +0530 Subject: [PATCH 1/2] fix: add comments to ignore deepcode warnings for hardcoded test API keys in retry logic tests --- test/integration/NetworkResilienceTests/RetryLogic.test.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/test/integration/NetworkResilienceTests/RetryLogic.test.js b/test/integration/NetworkResilienceTests/RetryLogic.test.js index 6d6f6919..d23b8628 100644 --- a/test/integration/NetworkResilienceTests/RetryLogic.test.js +++ b/test/integration/NetworkResilienceTests/RetryLogic.test.js @@ -270,6 +270,7 @@ describe('Retry Logic & Network Resilience - Comprehensive Tests', () => { describe('Error Scenarios', () => { test('Error_InvalidAPIKey_FailsWithoutRetry', async () => { const localStack = Contentstack.Stack({ + // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret api_key: 'invalid_api_key_12345', delivery_token: config.stack.delivery_token, environment: config.stack.environment, @@ -436,6 +437,7 @@ describe('Retry Logic & Network Resilience - Comprehensive Tests', () => { const RETRY_LIMIT = 5; const localStack = Contentstack.Stack({ + // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret api_key: 'invalid_api_key_for_timing_test', delivery_token: config.stack.delivery_token, environment: config.stack.environment, From 9f2bbd7047cd6306dc82b8ec75d051cb61face8c Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Sun, 2 Aug 2026 17:44:55 +0530 Subject: [PATCH 2/2] sca-scan.yml --- .github/workflows/sca-scan.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/sca-scan.yml b/.github/workflows/sca-scan.yml index 2307d489..79b65575 100644 --- a/.github/workflows/sca-scan.yml +++ b/.github/workflows/sca-scan.yml @@ -5,6 +5,9 @@ on: jobs: security-sca: runs-on: ubuntu-latest + permissions: + contents: read + pull-requests: write steps: - uses: actions/checkout@master - name: Run Snyk to check for vulnerabilities