@stacksjs/ts-cloud 0.7.64 → 0.7.65

package/dist/{chunk-3c6pp063.js → chunk-267f6qd0.js}

@@ -36946,7 +36946,7 @@ var SECRET_PATTERNS = [
   },
   {
     name: "AWS Secret Access Key",
-    pattern: /(?:aws_secret_access_key|aws_secret_key|secret_access_key|secretAccessKey)\s*[=:]\s*['"]?([A-Za-z0-9/+=]{40})['"]?/gi,
+    pattern: /(?:aws_secret_access_key|aws_secret_key|secret_access_key|secretAccessKey)['"]?\s*[=:]\s*['"]?([A-Za-z0-9/+=]{40})['"]?/gi,
     severity: "critical",
     description: "AWS Secret Access Key detected"
   },
@@ -37289,7 +37289,11 @@ class PreDeployScanner {
         if (this.isLikelyPlaceholder(match[0], contextLine)) {
           continue;
         }
-        if (this.isLowEntropy(match[1] || match[0])) {
+        const candidate2 = match[1] || match[0];
+        if (pattern.name === "AWS Secret Key (Generic)" && /^[a-f0-9]{40}$/i.test(candidate2)) {
+          continue;
+        }
+        if (this.isLowEntropy(candidate2)) {
           continue;
         }
         findings.push({

package/dist/deploy/index.js

@@ -32,7 +32,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-3c6pp063.js";
+} from "../chunk-267f6qd0.js";
 import {
   deleteStaticSite,
   deployStaticSite,

package/dist/index.js

@@ -285,7 +285,7 @@ import {
   volumeCapabilities,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-3c6pp063.js";
+} from "./chunk-267f6qd0.js";
 import {
   deleteStaticSite,
   deployStaticSite,

package/dist/security/pre-deploy-scanner.test.d.ts

@@ -0,0 +1 @@
+export {};