From 925d62712e59c9902f928cd1b1066ec604d93417 Mon Sep 17 00:00:00 2001 From: Lukasz Raczylo Date: Fri, 14 Aug 2026 16:30:50 +0100 Subject: [PATCH] test: mark synthetic PKCE verifier with trufflehog:ignore Quiet the Lob detector's false positive on the fake test-only code_verifier, matching the repo's existing // trufflehog:ignore convention in token_test.go. Local trufflehog filesystem scan is now 0 verified / 0 unverified. --- main_exchange_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/main_exchange_test.go b/main_exchange_test.go index a0552a3..075f8e2 100644 --- a/main_exchange_test.go +++ b/main_exchange_test.go @@ -79,7 +79,7 @@ func TestExchangeCodeForToken_Comprehensive(t *testing.T) { grantType: "authorization_code", code: "valid_auth_code_pkce", redirectURL: "https://example.com/callback", - codeVerifier: "test_verifier_string_that_is_long_enough", + codeVerifier: "test_verifier_string_that_is_long_enough", // trufflehog:ignore synthetic PKCE test value setupMock: func(server *httptest.Server) *TraefikOidc { return &TraefikOidc{ tokenURL: server.URL + "/token",