From fd04dd71cace2d4e11095c0a49d736a968893f31 Mon Sep 17 00:00:00 2001 From: Prashant Patil Date: Thu, 25 Jun 2026 20:23:55 +0530 Subject: [PATCH 1/3] SCAL-320790 - pipeline failure check --- .github/workflows/sonar-scan.yml | 17 ----------------- mcp/python-google-adk-trusted-auth/env.template | 2 +- sonar-project.properties | 3 --- visual-embed/spotter/query-decomposition/.env | 4 ++-- .../spotter/query-decomposition/.stackblitzrc | 4 ++-- visual-embed/spotter/spotter-agent-embed/.env | 2 +- .../spotter/spotter-agent-embed/.stackblitzrc | 2 +- 7 files changed, 7 insertions(+), 27 deletions(-) delete mode 100644 .github/workflows/sonar-scan.yml delete mode 100644 sonar-project.properties diff --git a/.github/workflows/sonar-scan.yml b/.github/workflows/sonar-scan.yml deleted file mode 100644 index 9ec7a0d..0000000 --- a/.github/workflows/sonar-scan.yml +++ /dev/null @@ -1,17 +0,0 @@ -name: Sonar Analysis - -on: - push: - branches: - - '**' - - '*' - pull_request: - types: [opened, synchronize, reopened] - -jobs: - sonar: - uses: thoughtspot/workflows/.github/workflows/sonar-scan.yml@main - secrets: - SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} - SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} - SONAR_PROJECTKEY: ${{ secrets.SONAR_PROJECTKEY }} diff --git a/mcp/python-google-adk-trusted-auth/env.template b/mcp/python-google-adk-trusted-auth/env.template index b4f3eb5..ec51547 100644 --- a/mcp/python-google-adk-trusted-auth/env.template +++ b/mcp/python-google-adk-trusted-auth/env.template @@ -5,7 +5,7 @@ GOOGLE_GENAI_USE_VERTEXAI=FALSE GOOGLE_API_KEY= # Example: -# TS_SECRET_KEY=abc123def456ghi789 +# TS_SECRET_KEY=your_thoughtspot_auth_token_here # TS_HOST=thoughtspot.example.com # GOOGLE_GENAI_USE_VERTEXAI=FALSE # GOOGLE_API_KEY=askdjfhuienadfasdf \ No newline at end of file diff --git a/sonar-project.properties b/sonar-project.properties deleted file mode 100644 index 76613ff..0000000 --- a/sonar-project.properties +++ /dev/null @@ -1,3 +0,0 @@ -sonar.c.file.suffixes=- -sonar.cpp.file.suffixes=- -sonar.objc.file.suffixes=- diff --git a/visual-embed/spotter/query-decomposition/.env b/visual-embed/spotter/query-decomposition/.env index a3fe897..cc78ed8 100644 --- a/visual-embed/spotter/query-decomposition/.env +++ b/visual-embed/spotter/query-decomposition/.env @@ -1,6 +1,6 @@ -GEMINI_API_KEY=AIzaSyCehkCkTrkV5iEgoaYD7MbCpHyOnDONL1Y +GEMINI_API_KEY=your_gemini_api_key_here VITE_THOUGHTSPOT_HOST=https://try-everywhere.thoughtspot.cloud VITE_TS_DATASOURCE_ID=cd252e5c-b552-49a8-821d-3eadaa049cca VITE_USERNAME=demo_devuser # Needed only if using token server #VITE_TOKEN_SERVER="https://node-token-auth-server-example-two.vercel.app" -VITE_TS_BEARER_TOKEN="ZGVtb19kZXZ1c2VyOkpITm9hWEp2TVNSVFNFRXRNalUySkRVd01EQXdNQ1JpV0UxUWJUQnFZbmhWTldneVRrSXJha0l6V1ZsblBUMGtXWFZKTVhSdVZVOVRiVlJLYXpSdk9Wb3dkVEpQZVRrNWQwbGtXVE01VWtobGJFWmhTbTlSUVdWWGJ6MA==" \ No newline at end of file +VITE_TS_BEARER_TOKEN="your_ts_bearer_token_here" \ No newline at end of file diff --git a/visual-embed/spotter/query-decomposition/.stackblitzrc b/visual-embed/spotter/query-decomposition/.stackblitzrc index fe09bea..4eff5b6 100644 --- a/visual-embed/spotter/query-decomposition/.stackblitzrc +++ b/visual-embed/spotter/query-decomposition/.stackblitzrc @@ -2,10 +2,10 @@ "installDependencies": true, "startCommand": "npm run dev:all", "env": { - "GEMINI_API_KEY": "AIzaSyCehkCkTrkV5iEgoaYD7MbCpHyOnDONL1Y", + "GEMINI_API_KEY": "your_gemini_api_key_here", "VITE_THOUGHTSPOT_HOST": "https://try-everywhere.thoughtspot.cloud", "VITE_TS_DATASOURCE_ID": "cd252e5c-b552-49a8-821d-3eadaa049cca", "VITE_USERNAME": "demo_devuser", - "VITE_TS_BEARER_TOKEN": "ZGVtb19kZXZ1c2VyOkpITm9hWEp2TVNSVFNFRXRNalUySkRVd01EQXdNQ1JpV0UxUWJUQnFZbmhWTldneVRrSXJha0l6V1ZsblBUMGtXWFZKTVhSdVZVOVRiVlJLYXpSdk9Wb3dkVEpQZVRrNWQwbGtXVE01VWtobGJFWmhTbTlSUVdWWGJ6MA==" + "VITE_TS_BEARER_TOKEN": "your_ts_bearer_token_here" } } diff --git a/visual-embed/spotter/spotter-agent-embed/.env b/visual-embed/spotter/spotter-agent-embed/.env index 12488df..196f6bb 100644 --- a/visual-embed/spotter/spotter-agent-embed/.env +++ b/visual-embed/spotter/spotter-agent-embed/.env @@ -1,4 +1,4 @@ -GEMINI_API_KEY=AIzaSyCehkCkTrkV5iEgoaYD7MbCpHyOnDONL1Y +GEMINI_API_KEY=your_gemini_api_key_here VITE_THOUGHTSPOT_HOST=https://embed-1-do-not-delete.thoughtspotstaging.cloud VITE_TS_DATASOURCE_ID=cd252e5c-b552-49a8-821d-3eadaa049cca VITE_USERNAME=demo-user diff --git a/visual-embed/spotter/spotter-agent-embed/.stackblitzrc b/visual-embed/spotter/spotter-agent-embed/.stackblitzrc index 7afcf6d..87a6f4f 100644 --- a/visual-embed/spotter/spotter-agent-embed/.stackblitzrc +++ b/visual-embed/spotter/spotter-agent-embed/.stackblitzrc @@ -2,7 +2,7 @@ "installDependencies": true, "startCommand": "npm run start-agent & npm run dev", "env": { - "GEMINI_API_KEY": "AIzaSyCehkCkTrkV5iEgoaYD7MbCpHyOnDONL1Y", + "GEMINI_API_KEY": "your_gemini_api_key_here", "VITE_THOUGHTSPOT_HOST": "https://embed-1-do-not-delete.thoughtspotstaging.cloud", "VITE_TS_DATASOURCE_ID": "cd252e5c-b552-49a8-821d-3eadaa049cca", "VITE_USERNAME": "demo-user", From a16392c15d116d858adc44178b21d5bfc08ad1b0 Mon Sep 17 00:00:00 2001 From: Prashant Patil Date: Thu, 25 Jun 2026 20:30:23 +0530 Subject: [PATCH 2/3] SCAL-320790 - original rotated keys ig. --- .gitleaksignore | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .gitleaksignore diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..1a25026 --- /dev/null +++ b/.gitleaksignore @@ -0,0 +1,17 @@ +# gitleaks allowlist — known historical findings, all credentials ROTATED/REVOKED. +# These point at past commits; the current working tree uses placeholders. +# Format: ::: (see `gitleaks detect --verbose` fingerprints) + +# Gemini API key (rotated) committed in commit a7bdb56 +a7bdb568a53674ee5dd4772aba81b508663404f6:visual-embed/spotter/spotter-agent-embed/.stackblitzrc:gcp-api-key:5 +a7bdb568a53674ee5dd4772aba81b508663404f6:visual-embed/spotter/query-decomposition/.stackblitzrc:gcp-api-key:5 +# TS bearer token (rotated) committed in commit a7bdb56 +a7bdb568a53674ee5dd4772aba81b508663404f6:visual-embed/spotter/query-decomposition/.stackblitzrc:generic-api-key:9 + +# Placeholder example value in env.template (not a real secret) +8fd87fdf3d544c26e3438a1c456069b45f2e5d8b:mcp/python-google-adk-trusted-auth/env.template:generic-api-key:8 + +# Gemini API key + TS bearer token (rotated) committed in commit 8fd87fd +8fd87fdf3d544c26e3438a1c456069b45f2e5d8b:visual-embed/spotter/spotter-agent-embed/.env:gcp-api-key:1 +8fd87fdf3d544c26e3438a1c456069b45f2e5d8b:visual-embed/spotter/query-decomposition/.env:generic-api-key:6 +8fd87fdf3d544c26e3438a1c456069b45f2e5d8b:visual-embed/spotter/query-decomposition/.env:gcp-api-key:1 From cd41cd8176d63a88a8907bfd8157baa1557d905c Mon Sep 17 00:00:00 2001 From: Prashant Patil Date: Thu, 25 Jun 2026 20:48:54 +0530 Subject: [PATCH 3/3] https://try-everywhere.thoughtspot.cloud/v2/#/everywhere/api/rest/playSCAL-320790 direction to get new token for demo --- visual-embed/spotter/query-decomposition/.env | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/visual-embed/spotter/query-decomposition/.env b/visual-embed/spotter/query-decomposition/.env index cc78ed8..5b605bf 100644 --- a/visual-embed/spotter/query-decomposition/.env +++ b/visual-embed/spotter/query-decomposition/.env @@ -3,4 +3,8 @@ VITE_THOUGHTSPOT_HOST=https://try-everywhere.thoughtspot.cloud VITE_TS_DATASOURCE_ID=cd252e5c-b552-49a8-821d-3eadaa049cca VITE_USERNAME=demo_devuser # Needed only if using token server #VITE_TOKEN_SERVER="https://node-token-auth-server-example-two.vercel.app" +# Get a bearer token from the ThoughtSpot REST API Playground: +# 1. Open: https://try-everywhere.thoughtspot.cloud/v2/#/everywhere/api/rest/playgroundV2_0?apiResourceId=http%2Fapi-endpoints%2Fauthentication%2Fget-current-user-info +# 2. Open Configurations > Authentication and authenticate +# 3. Copy the generated token and paste it below VITE_TS_BEARER_TOKEN="your_ts_bearer_token_here" \ No newline at end of file