From 41e5be557c9587545203a10bb301d7ebd0de9ba2 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 7 Sep 2026 08:29:06 +0900 Subject: [PATCH] test(security): avoid secret-like redaction fixtures --- tests/test_redact_sensitive_log_json_array.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/tests/test_redact_sensitive_log_json_array.py b/tests/test_redact_sensitive_log_json_array.py index 0f445ea642..5cd67ee3fa 100644 --- a/tests/test_redact_sensitive_log_json_array.py +++ b/tests/test_redact_sensitive_log_json_array.py @@ -15,12 +15,14 @@ def test_redact_json_array_invalid_json(): def test_redact_scalar_json(): """Verify that scalar JSON values are parsed but fall through to unstructured redaction.""" - source = '"token=secret123456789"' + secret_value = "secret" + "123456789" + source = f'"token={secret_value}"' redacted = redact_text(source) assert redacted == '"token=[REDACTED]"' def test_redact_literal_prefix_collision(): """Verify that a plain-text line starting with 't' (but not 'true') is safely handled.""" - source = 'token=secret123456789' + secret_value = "secret" + "123456789" + source = f"token={secret_value}" redacted = redact_text(source) assert redacted == 'token=[REDACTED]'