Merge pull request #55 from thoughtspot/SCAL-320790

SCAL-320790 - pipeline failure check

Author: yinstardev

.github/workflows/sonar-scan.yml

@@ -0,0 +1,17 @@
+# gitleaks allowlist — known historical findings, all credentials ROTATED/REVOKED.
+# These point at past commits; the current working tree uses placeholders.
+# Format: <commit>:<file>:<rule>:<line>  (see `gitleaks detect --verbose` fingerprints)
+
+# Gemini API key (rotated) committed in commit a7bdb56
+a7bdb568a53674ee5dd4772aba81b508663404f6:visual-embed/spotter/spotter-agent-embed/.stackblitzrc:gcp-api-key:5
+a7bdb568a53674ee5dd4772aba81b508663404f6:visual-embed/spotter/query-decomposition/.stackblitzrc:gcp-api-key:5
+# TS bearer token (rotated) committed in commit a7bdb56
+a7bdb568a53674ee5dd4772aba81b508663404f6:visual-embed/spotter/query-decomposition/.stackblitzrc:generic-api-key:9
+
+# Placeholder example value in env.template (not a real secret)
+8fd87fdf3d544c26e3438a1c456069b45f2e5d8b:mcp/python-google-adk-trusted-auth/env.template:generic-api-key:8
+
+# Gemini API key + TS bearer token (rotated) committed in commit 8fd87fd
+8fd87fdf3d544c26e3438a1c456069b45f2e5d8b:visual-embed/spotter/spotter-agent-embed/.env:gcp-api-key:1
+8fd87fdf3d544c26e3438a1c456069b45f2e5d8b:visual-embed/spotter/query-decomposition/.env:generic-api-key:6
+8fd87fdf3d544c26e3438a1c456069b45f2e5d8b:visual-embed/spotter/query-decomposition/.env:gcp-api-key:1

.gitleaksignore

@@ -5,7 +5,7 @@ GOOGLE_GENAI_USE_VERTEXAI=FALSE
 GOOGLE_API_KEY=<Gemini api key here>
 
 # Example:
-# TS_SECRET_KEY=abc123def456ghi789
+# TS_SECRET_KEY=your_thoughtspot_auth_token_here
 # TS_HOST=thoughtspot.example.com
 # GOOGLE_GENAI_USE_VERTEXAI=FALSE
 # GOOGLE_API_KEY=askdjfhuienadfasdf

mcp/python-google-adk-trusted-auth/env.template

@@ -1,6 +1,10 @@
-GEMINI_API_KEY=AIzaSyCehkCkTrkV5iEgoaYD7MbCpHyOnDONL1Y
+GEMINI_API_KEY=your_gemini_api_key_here
 VITE_THOUGHTSPOT_HOST=https://try-everywhere.thoughtspot.cloud
 VITE_TS_DATASOURCE_ID=cd252e5c-b552-49a8-821d-3eadaa049cca
 VITE_USERNAME=demo_devuser # Needed only if using token server
 #VITE_TOKEN_SERVER="https://node-token-auth-server-example-two.vercel.app"
-VITE_TS_BEARER_TOKEN="ZGVtb19kZXZ1c2VyOkpITm9hWEp2TVNSVFNFRXRNalUySkRVd01EQXdNQ1JpV0UxUWJUQnFZbmhWTldneVRrSXJha0l6V1ZsblBUMGtXWFZKTVhSdVZVOVRiVlJLYXpSdk9Wb3dkVEpQZVRrNWQwbGtXVE01VWtobGJFWmhTbTlSUVdWWGJ6MA=="
+# Get a bearer token from the ThoughtSpot REST API Playground:
+#   1. Open: https://try-everywhere.thoughtspot.cloud/v2/#/everywhere/api/rest/playgroundV2_0?apiResourceId=http%2Fapi-endpoints%2Fauthentication%2Fget-current-user-info
+#   2. Open Configurations > Authentication and authenticate
+#   3. Copy the generated token and paste it below
+VITE_TS_BEARER_TOKEN="your_ts_bearer_token_here"

sonar-project.properties

@@ -2,10 +2,10 @@
   "installDependencies": true,
   "startCommand": "npm run dev:all",
   "env": {
-    "GEMINI_API_KEY": "AIzaSyCehkCkTrkV5iEgoaYD7MbCpHyOnDONL1Y",
+    "GEMINI_API_KEY": "your_gemini_api_key_here",
     "VITE_THOUGHTSPOT_HOST": "https://try-everywhere.thoughtspot.cloud",
     "VITE_TS_DATASOURCE_ID": "cd252e5c-b552-49a8-821d-3eadaa049cca",
     "VITE_USERNAME": "demo_devuser",
-    "VITE_TS_BEARER_TOKEN": "ZGVtb19kZXZ1c2VyOkpITm9hWEp2TVNSVFNFRXRNalUySkRVd01EQXdNQ1JpV0UxUWJUQnFZbmhWTldneVRrSXJha0l6V1ZsblBUMGtXWFZKTVhSdVZVOVRiVlJLYXpSdk9Wb3dkVEpQZVRrNWQwbGtXVE01VWtobGJFWmhTbTlSUVdWWGJ6MA=="
+    "VITE_TS_BEARER_TOKEN": "your_ts_bearer_token_here"
   }
 }

visual-embed/spotter/query-decomposition/.env

@@ -1,4 +1,4 @@
-GEMINI_API_KEY=AIzaSyCehkCkTrkV5iEgoaYD7MbCpHyOnDONL1Y
+GEMINI_API_KEY=your_gemini_api_key_here
 VITE_THOUGHTSPOT_HOST=https://embed-1-do-not-delete.thoughtspotstaging.cloud
 VITE_TS_DATASOURCE_ID=cd252e5c-b552-49a8-821d-3eadaa049cca
 VITE_USERNAME=demo-user

visual-embed/spotter/query-decomposition/.stackblitzrc

@@ -2,7 +2,7 @@
   "installDependencies": true,
   "startCommand": "npm run start-agent & npm run dev",
   "env": {
-    "GEMINI_API_KEY": "AIzaSyCehkCkTrkV5iEgoaYD7MbCpHyOnDONL1Y",
+    "GEMINI_API_KEY": "your_gemini_api_key_here",
     "VITE_THOUGHTSPOT_HOST": "https://embed-1-do-not-delete.thoughtspotstaging.cloud",
     "VITE_TS_DATASOURCE_ID": "cd252e5c-b552-49a8-821d-3eadaa049cca",
     "VITE_USERNAME": "demo-user",