From 30af0598b95008cc025698bec1453dc46d183b22 Mon Sep 17 00:00:00 2001 From: Makisuo Date: Sat, 14 Nov 2026 01:14:08 +0100 Subject: [PATCH] test(cost): OpenAI fixture keys read as obvious fakes Secret scanning flagged the sk-admin- test keys as real OpenAI keys. They now say FAKE-TEST-KEY so neither a scanner nor a reader mistakes them. --- .../src/services/cost/OpenAiCostConnectionService.test.ts | 4 ++-- .../services/cost/providers/openai/OpenAiCostProvider.test.ts | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/packages/backend/src/services/cost/OpenAiCostConnectionService.test.ts b/packages/backend/src/services/cost/OpenAiCostConnectionService.test.ts index 3b7fc0633c..f5f5de0da2 100644 --- a/packages/backend/src/services/cost/OpenAiCostConnectionService.test.ts +++ b/packages/backend/src/services/cost/OpenAiCostConnectionService.test.ts @@ -16,8 +16,8 @@ afterEach(() => cleanupTestDbs(trackedDbs)) const ORG = Schema.decodeSync(OrgId)("org_cost") const USER = Schema.decodeSync(UserId)("user_cost") -const KEY = "sk-admin-0123456789abcdefghijABCDEFGHIJ0123456789" -const OTHER_KEY = "sk-admin-9876543210zyxwvutsrqZYXWVUTSRQ9876543210" +const KEY = "sk-admin-FAKE-TEST-KEY-not-a-real-secret" +const OTHER_KEY = "sk-admin-FAKE-TEST-KEY-not-a-real-secret-2" const NOW = DateTime.toEpochMillis(DateTime.makeUnsafe("2026-11-11T06:00:00Z")) const SPEND = [{ day: "2026-10-20", value: 1.5, lineItem: "gpt-4o, input" }] const VALIDATION = "@maple/http/cost-connections/CostConnectionValidationError" diff --git a/packages/backend/src/services/cost/providers/openai/OpenAiCostProvider.test.ts b/packages/backend/src/services/cost/providers/openai/OpenAiCostProvider.test.ts index f9d7f4893c..af311a28fd 100644 --- a/packages/backend/src/services/cost/providers/openai/OpenAiCostProvider.test.ts +++ b/packages/backend/src/services/cost/providers/openai/OpenAiCostProvider.test.ts @@ -13,7 +13,7 @@ afterEach(() => cleanupTestDbs(trackedDbs)) const ORG = Schema.decodeSync(OrgId)("org_cost") const OTHER_ORG = Schema.decodeSync(OrgId)("org_other") const USER = Schema.decodeSync(UserId)("user_cost") -const KEY = "sk-admin-0123456789abcdefghijABCDEFGHIJ0123456789" +const KEY = "sk-admin-FAKE-TEST-KEY-not-a-real-secret" const WINDOW = { startDay: "2026-10-20", endDay: "2026-11-10" } /** The pull runs the morning after the window's last day. */ const NOW = DateTime.toEpochMillis(DateTime.makeUnsafe("2026-11-11T06:00:00Z"))