From 6646d10ff504a2b203b2884cb97e9fff9154b598 Mon Sep 17 00:00:00 2001 From: Jakub Zych Date: Sun, 4 Oct 2026 02:03:57 +0200 Subject: [PATCH] test: TestGolemAdminSchemas refuses an AI model JSON with any api_key key, even redacted --- golem_admin_test.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/golem_admin_test.go b/golem_admin_test.go index 3bb5619..808d921 100644 --- a/golem_admin_test.go +++ b/golem_admin_test.go @@ -58,8 +58,8 @@ func TestGolemAdminSchemas(t *testing.T) { } m := models.AiModel{Name: "Hidden", APIKey: lagoon.NewEncrypted("sk-hidden-0001")} raw, _ := json.Marshal(m) - if strings.Contains(string(raw), "sk-hidden-0001") { - t.Fatalf("the model serializes its key: %s", raw) + if strings.Contains(string(raw), "sk-hidden-0001") || strings.Contains(string(raw), "api_key") { + t.Fatalf("the model serializes its key, even redacted: %s", raw) } if len(models.All()) == 0 || len(p.Models()) == 0 || len(p.Migrations()) == 0 { t.Fatal("the plugin hands no models or migrations to the framework")