meal-order-manager/.security-review/suppressions.json
Adam Moussa 2a7d8af1f7
chore(security): suppress public OAuth fixture
Document the scanner false positive without suppressing any runtime credential flow.
2026-07-31 11:53:53 -04:00

8 lines
357 B
JSON

{
"suppressions": [
{
"id": "gitleaks-generic-api-key-45",
"justification": "False positive. tests/test_submit_order.py defines a synthetic Google OAuth audience used only for mocked token verification. OAuth client IDs are public identifiers, this fixture is not a credential, and the tests make no real Google or AWS calls."
}
]
}