We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 36ae8cc commit cc9014eCopy full SHA for cc9014e
checkov/secrets/runner.py
@@ -291,7 +291,7 @@ def run(
291
for s in secrets_by_line:
292
if SECRET_TYPE_TO_ID.get(s.type) == BASE64_HIGH_ENTROPY_CHECK_ID and entropy_secret is not None:
293
s.secret_value = entropy_secret
294
- if s.check_id == RANDOM_HIGH_ENTROPY_CHECK_ID:
+ if s.check_id == RANDOM_HIGH_ENTROPY_CHECK_ID and BASE64_HIGH_ENTROPY_CHECK_ID in [SECRET_TYPE_TO_ID.get(i.type) for i in secrets_by_line]:
295
try:
296
entropy_secret = s.secret_value if s.secret_value else None
297
secrets[_file_key].remove(s)
0 commit comments