ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add newlines around includes in secrets template (#4718)

Browse Source 
* Add newlines around includes in secrets template

* Mention that new lines are needed around includes

---------

Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
This commit is contained in:
teemu-rytilahti-sonarsource 2025-03-04 09:50:45 +01:00 committed by GitHub
parent 91feb0da97
commit 8586551b59
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
rspec-tools/rspec_template/single_language/secrets/rule.adoc
View File

@ -19,7 +19,7 @@ include::../../../shared_content/secrets/rationale.adoc[]
include::../../../shared_content/secrets/impact/generic_impact.adoc[]
// Uncomment the following line, if specifying detailed impacts from below:
// Uncomment the following line, if specifying detailed impacts from below (also make sure to have new lines around the uncommented includes):
// include::../../../shared_content/secrets/impact/specific_impact_intro.adoc[]
// Secret may allow hosting arbitrary files
@ -88,15 +88,19 @@ include::../../../shared_content/secrets/impact/generic_impact.adoc[]
== How to fix it
// 1. Revoke leaked secrets
include::../../../shared_content/secrets/fix/revoke.adoc[]
// 2. Analyze recent use to identify misuse
include::../../../shared_content/secrets/fix/recent_use.adoc[]
// 3. Use a secret vault in the future
include::../../../shared_content/secrets/fix/vault.adoc[]
// 4. Never hard-code secrets
include::../../../shared_content/secrets/fix/default.adoc[]
// OAuth PKCE is very specific to OAuth 2.0