# gitleaks baseline: findings in published history that are not live
# credentials. Each entry is a fingerprint <commit>:<path>:<rule>:<line>;
# none holds a secret value; a commit or tag message finding is
# msgs/commits/<sha>.txt:<rule>:<line> or msgs/tags/<object id>.txt:<rule>:<line>.
# scripts/gitleaks_history.py passes this file to gitleaks explicitly; the
# pre-push hook reads origin/main's copy instead of a branch's.
# tests/test_gitleaks_baseline.py pins the list.

# The old default Polaris client secret, public on PyPI in 1.0.0 to 1.4.0. It
# is not a credential for any live deployment; the current code has no
# default and requires a secret per deployment.
6cc98444611411953c72fb394941a11ab98043c3:src/lakebench/_constants.py:generic-api-key:8

# The same default secret, passed to the deploy templates in the same releases.
e51bd922f17484aead6318536f8c1929b94be8fd:src/lakebench/deploy/engine.py:generic-api-key:260

# The fixed v1.6 in-cluster Hive and Polaris database passwords, public in the
# 1.6.0 release. 1.7 generates a password per deployment and keeps these only
# to reach a database a v1.6 deployment created; neither guards anything
# outside that deployment's own namespace.
58d5e35c5bedfd4956bcae58902428e8eb12f4b2:src/lakebench/deploy/deployment_secrets.py:generic-api-key:48

# The Polaris half of the same pair, on the next line of the same commit.
58d5e35c5bedfd4956bcae58902428e8eb12f4b2:src/lakebench/deploy/deployment_secrets.py:generic-api-key:49
