@dailephd/my-dev-kit-lab 0.4.0 → 0.4.1

package/tests/fixtures/android/advanced-security-fixtures/resource-resolution/module-a/src/main/res/xml/network_security_config.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <base-config cleartextTrafficPermitted="false">
+        <trust-anchors>
+            <certificates src="system" />
+        </trust-anchors>
+    </base-config>
+</network-security-config>

package/tests/fixtures/android/advanced-security-fixtures/resource-resolution/module-b/src/main/res/xml/malformed_network_security_config.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <base-config cleartextTrafficPermitted="false">
+        <trust-anchors>
+            <certificates src="system" />
+        </trust-anchors>
+    <!-- missing closing tag for base-config and network-security-config on purpose -->

package/tests/fixtures/android/advanced-security-fixtures/secret-candidates/SampleActivity.java

@@ -0,0 +1,8 @@
+package com.example.fixtures;
+
+// Fixture only — every value below is fake and unmistakably not a real
+// credential. Used by later v0.4.1 secret-candidate scanner batches.
+public class SampleActivity {
+    private static final String SECRET_TOKEN = "FAKE-DUMMY-TOKEN-0000000000000000";
+    private static final String DB_PASSWORD = "test-fake-db-password";
+}

package/tests/fixtures/android/advanced-security-fixtures/secret-candidates/SampleActivity.kt

@@ -0,0 +1,9 @@
+package com.example.fixtures
+
+// Fixture only — every value below is fake and unmistakably not a real
+// credential. Used by later v0.4.1 secret-candidate scanner batches.
+class SampleActivity {
+    private val apiToken = "FAKE_TOKEN_1234567890ABCDEFGHIJ"
+    private val password = "changeme-fake-password"
+    private val placeholderSecret = "your-api-key-here"
+}

package/tests/fixtures/android/advanced-security-fixtures/secret-candidates/build.gradle

@@ -0,0 +1,11 @@
+// Fixture only — every value below is fake. Gradle Groovy DSL candidate.
+android {
+    signingConfigs {
+        release {
+            storeFile file("fake-release-keystore.jks")
+            storePassword "FAKE-KEYSTORE-PASSWORD-0000"
+            keyAlias "fake-release-key"
+            keyPassword "FAKE-KEY-PASSWORD-0000"
+        }
+    }
+}

package/tests/fixtures/android/advanced-security-fixtures/secret-candidates/build.gradle.kts

@@ -0,0 +1,11 @@
+// Fixture only — every value below is fake. Gradle Kotlin DSL candidate.
+android {
+    signingConfigs {
+        create("release") {
+            storeFile = file("fake-release-keystore.jks")
+            storePassword = "FAKE-KEYSTORE-PASSWORD-0000"
+            keyAlias = "fake-release-key"
+            keyPassword = "FAKE-KEY-PASSWORD-0000"
+        }
+    }
+}

package/tests/fixtures/android/advanced-security-fixtures/secret-candidates/google-services.json

@@ -0,0 +1,16 @@
+{
+  "project_info": {
+    "project_number": "000000000000",
+    "project_id": "fake-fixture-project",
+    "storage_bucket": "fake-fixture-project.appspot.com"
+  },
+  "client": [
+    {
+      "client_info": {
+        "mobilesdk_app_id": "1:000000000000:android:0000000000000000000000",
+        "android_client_info": { "package_name": "com.example.fixtures" }
+      },
+      "api_key": [{ "current_key": "FAKE-FIREBASE-WEB-API-KEY-0000000000" }]
+    }
+  ]
+}

package/tests/fixtures/android/advanced-security-fixtures/secret-candidates/local.properties

@@ -0,0 +1,3 @@
+# Fixture only — every value below is fake.
+sdk.dir=/fake/path/to/android/sdk
+fake.api.key=FAKE-LOCAL-PROPERTIES-KEY-0000000000