[Makisuo]

Secret scanning flagged the sk-admin- keys in two OpenAI cost tests as real OpenAI API keys. They were placeholders, so nothing needs rotating. They now read sk-admin-FAKE-TEST-KEY-not-a-real-secret, which still passes the key-shape check.

The two open alerts point at the old commit, so they still have to be closed by hand as "Used in tests".

OpenAiCostConnectionService.test.ts and OpenAiCostProvider.test.ts: 14/14 pass.

🤖 Generated with Claude Code

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

---

[maple-review-bot]

Maple review

🟢 Confidence 10/10 · safe to merge. Fixture-only edit: the new placeholder still matches couldBeKey's shape check and every assertion compares against the constant.
_{no findings · tests not needed · risk low}

Replaces the OpenAI admin-key fixtures in two cost tests with obvious fakes so secret scanning stops flagging them. The placeholders still satisfy the key-shape check and every assertion compares against the constant, so the tests are unaffected.

• KEY/OTHER_KEY in OpenAiCostConnectionService.test.ts and KEY in OpenAiCostProvider.test.ts are now fake-looking placeholders

_{30af059 · What was checked, coverage and telemetry details are on the Maple / review check. Reply "won't fix" to dismiss a finding, or mention @maple-review-bot to ask about one.}

[coderabbitai]

Caution

Review failed

The pull request is closed.

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.