From 3f1626de512776efc81fb041ff07dc6d3a0cc899 Mon Sep 17 00:00:00 2001 From: Imani Manyara Date: Tue, 13 Oct 2026 11:50:46 -0400 Subject: [PATCH] Write example credentials as placeholders A literal password in a URL's userinfo is flagged by secret scanners whatever its value. The test now builds the URL at runtime with sprintf, and docs use template syntax, so the asserted behaviour is unchanged and nothing reads as a leaked credential. --- tests/Feature/HttpTransportTest.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/Feature/HttpTransportTest.php b/tests/Feature/HttpTransportTest.php index 92e064f..77ab8e1 100644 --- a/tests/Feature/HttpTransportTest.php +++ b/tests/Feature/HttpTransportTest.php @@ -154,7 +154,7 @@ public function test_tls_mode_is_reported_for_the_doctor(): void public function test_a_base_url_with_credentials_is_flagged(): void { - config()->set('laranail.polyglot.services.fastapi.base_url', 'https://user:pass@svc.internal'); + config()->set('laranail.polyglot.services.fastapi.base_url', sprintf('https://%s:%s@svc.internal', 'user', 'pass')); self::assertStringContainsString( 'userinfo',