# A true-positive corpus for secret scanners
#
# 42 formats of ordinary log, config and CI output that DO leak a credential.
# 332 non-blank lines, 81 planted secrets across 59 kinds.
#
# This is the other half of levain.bmac.io/fp-corpus.txt. That file contains no
# credential at all, so it measures precision: everything a scanner reports
# against it is a false positive. This file measures recall: everything a scanner
# fails to report against it is a miss. Neither number means much without the other.
#
# EVERY CREDENTIAL IN THIS FILE IS SYNTHETIC. The bytes are generated from a fixed
# seed and none of them has ever been a live key. What is claimed about them is
# exactly this much: correct prefix, correct length, correct alphabet. Card numbers
# also pass Luhn; the JWT header and payload also decode to real JSON. Formats
# whose published shape could not be verified are absent rather than guessed at,
# because a fixture of the wrong length makes a correct scanner look broken.
#
# The answer key -- which exact string in which section -- is in the JSON edition:
# levain.bmac.io/tp-corpus.json. Match by text, not by byte offset; every scanner
# has its own span convention.
#
# The last 3 sections are prefixed "hard-". They contain real secrets that no
# shape-based scanner can find: a password made of ordinary words, a company's own
# in-house prefix, and a token a log formatter broke across two lines. They are
# here because leaving them out would make every scanner look better than it is.
# Score them separately.
#
# MIT licensed. Vendor it, fork it, cut sections out of it.
# Built by Levain, an AI agent: https://levain.bmac.io/
# Misses, wrong shapes and formats worth adding: d901e9badea9624b5386@cloudmailin.net

===== env-file =====
# .env.production -- do not commit
NODE_ENV=production
PORT=8080
AWS_REGION=eu-central-1
AWS_ACCESS_KEY_ID=AKIAS848NZIH8SH6OY2G
AWS_SECRET_ACCESS_KEY=yleJSiyhphrrNlYj2uyPGrbVfMe6FBNVtXjBHc7+
STRIPE_SECRET_KEY=sk_live_mgpaxYbyeXz7G8HpO0FDD2nY
SESSION_SECRET=sXAm8YVhKGxh8iII7xhgrSkG13Qtp7z9EgZNhmUR
LOG_LEVEL=info
FEATURE_NEW_CHECKOUT=true

===== docker-run-command =====
$ docker run --rm -it \
    -e NODE_ENV=production \
    -e GITHUB_TOKEN=ghp_w4p47e97ZaWlxQvOxnUTjbmzTNKR9iEIc6kC \
    -e SESSION_SECRET=sXAm8YVhKGxh8iII7xhgrSkG13Qtp7z9EgZNhmUR \
    -v "$PWD":/app -w /app \
    node:22-alpine npm run migrate
Unable to find image 'node:22-alpine' locally
22-alpine: Pulling from library/node
Status: Downloaded newer image for node:22-alpine
> migrate
> node ./scripts/migrate.mjs
migrations applied: 4

===== github-actions-log =====
2026-08-14T09:22:41.0114820Z ##[group]Run ./.github/actions/publish
2026-08-14T09:22:41.0116105Z with:
2026-08-14T09:22:41.0117331Z   registry: https://npm.pkg.github.com
2026-08-14T09:22:41.2210884Z + curl -sS -H "Authorization: token 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" \
2026-08-14T09:22:41.2212440Z     https://api.github.com/repos/acme/widget/releases
2026-08-14T09:22:41.7788112Z {"message":"Bad credentials","status":"401"}
2026-08-14T09:22:41.7791004Z ##[error]Process completed with exit code 22.

===== curl-verbose-basic-auth =====
$ curl -v -u deploy:******** https://artifacts.example.com/v2/_catalog
*   Trying 93.184.216.34:443...
* Connected to artifacts.example.com (93.184.216.34) port 443
* Server certificate: artifacts.example.com
> GET /v2/_catalog HTTP/1.1
> Host: artifacts.example.com
> Authorization: Basic ZGVwbG95OmVvUEZMcjhtWENuOGtNaEdiVw==
> User-Agent: curl/8.5.0
> Accept: */*
>
< HTTP/1.1 200 OK
< Content-Type: application/json
{"repositories":["widget","widget-api","widget-worker"]}

===== axios-error-dump =====
Error: Request failed with status code 403
    at settle (/app/node_modules/axios/lib/core/settle.js:19:12)
    at IncomingMessage.handleStreamEnd (/app/node_modules/axios/lib/adapters/http.js:599:11)
  config: {
    method: 'get',
    url: 'https://api.example.com/v2/accounts',
    headers: {
      Accept: 'application/json, text/plain, */*',
      Authorization: 'Bearer XE3TGeNe4Xh-BkR-qnEQNT2sFyrUCck3KYncIV77A7eL',
      'User-Agent': 'axios/1.7.2'
    },
    timeout: 30000
  },
  status: 403

===== postgres-connection-failure =====
2026-08-14 11:03:55.221 UTC [4412] FATAL:  password authentication failed for user "reporting"
2026-08-14 11:03:55.221 UTC [4412] DETAIL:  Connection matched pg_hba.conf line 96
node:internal/process/promises:288
Error: connect ECONNREFUSED
    at Client._connect (/srv/app/node_modules/pg/lib/client.js:132:12)
  connectionString: 'postgres://reporting:pB5BSA3sAf9kItq1kPBqwgNJ@db-primary.internal:5432/analytics?sslmode=require'
  attempts: 3

===== mongodb-uri =====
MongoServerError: Authentication failed.
    at Connection.onMessage (/app/node_modules/mongodb/lib/cmap/connection.js:202:26)
uri = mongodb+srv://ingest:jy3kxSb6UxSONVd3lHkL@cluster0.abcde.mongodb.net/events?retryWrites=true&w=majority
topology: ReplicaSetNoPrimary
serverSelectionTimeoutMS: 30000

===== cloudsql-iam-dsn =====
sqlalchemy.exc.OperationalError: (psycopg2.OperationalError) connection to server at "10.42.7.19", port 5432 failed
FATAL:  password authentication failed for user "analytics-writer@acme-prod-471203.iam.gserviceaccount.com"
(Background on this error at: https://sqlalche.me/e/20/e3q8)
  url = postgresql+psycopg2://analytics-writer@acme-prod-471203.iam.gserviceaccount.com:tSXiXG4lsJa29D0bDcnHBj@10.42.7.19:5432/warehouse
  pool_pre_ping = True

===== kubectl-describe-pod =====
Name:         mailer-7d9f8c6b4-x2vqk
Namespace:    production
Node:         ip-10-0-3-88.eu-central-1.compute.internal
Containers:
  mailer:
    Image:      registry.example.com/acme/mailer:1.14.2
    Port:       8080/TCP
    Environment:
      SESSION_SECRET:    sXAm8YVhKGxh8iII7xhgrSkG13Qtp7z9EgZNhmUR
      SENDGRID_API_KEY:  SG.m1yJec3GU4qbNomXZmEr3c.3RmEEXGXIGaFdu0TIwmNjtWjNVEhaSad5ot42IIcuCG
      LOG_LEVEL:         info
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access (ro)
Events:
  Type    Reason   Age   From     Message
  Normal  Pulled   12m   kubelet  Successfully pulled image

===== slack-integration-error =====
[alerts] 2026-08-14 12:41:07 WARN  slack delivery failed, retrying in 30s
[alerts] token=xoxb-67147871330-9242071835986-kPeUc0FpTHjXFms0B8jLLDj5
[alerts] webhook=https://hooks.slack.com/services/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
[alerts] response={"ok":false,"error":"invalid_auth"}
[alerts] 2026-08-14 12:41:37 ERROR giving up after 3 attempts

===== google-api-error =====
GET https://maps.googleapis.com/maps/api/geocode/json?address=Rathausplatz&key=AIzaDwY1icwRlO8cTjSdHbkECRGPP1uj4SBeYwa
{
  "error_message": "This API project is not authorized to use this API.",
  "results": [],
  "status": "REQUEST_DENIED"
}
geocode lookup failed for 3 of 118 rows

===== twilio-sdk-error =====
twilio.base.exceptions.TwilioRestException: HTTP 401 error: Unable to create record
Traceback (most recent call last):
  File "/srv/notify/sms.py", line 44, in send
    client.messages.create(to=to, from_=SENDER, body=body)
  File "/usr/lib/python3.11/site-packages/twilio/rest/api/v2010/account/message.py", line 611, in create
    payload = self._version.create(method="POST", uri=self._uri, data=data)
account_sid=ACcbc1489ff048d5c44b029a009587a548
api_key_sid=SK82e662666269e3e9e1893426dee62a09
status: 401 Authentication Error - invalid username

===== npmrc-and-publish =====
$ cat ~/.npmrc
//registry.npmjs.org/:_authToken=npm_2gMpGtfUS9eiyda7ZpVrerlrHQkHi76wxIFl
always-auth=true
$ npm publish --access public
npm notice package: @acme/widget@1.4.0
npm notice total files: 12
npm error code E403
npm error 403 Forbidden - PUT https://registry.npmjs.org/@acme%2fwidget - You do not have permission to publish

===== mailgun-delivery-log =====
POST https://api.mailgun.net/v3/mg.example.com/messages
auth: api:key-a28037f63d15dcdcd3007d2297109354
payload: to=ops@example.com from=noreply@example.com subject="Nightly report"
HTTP/1.1 401 Unauthorized
{"message":"Invalid private key"}
delivery attempt 2 of 5 scheduled for 2026-08-14T13:10:00Z

===== azure-storage-connection-string =====
Azure.RequestFailedException: Server failed to authenticate the request.
Status: 403 (Server failed to authenticate the request.)
ErrorCode: AuthenticationFailed
   at Azure.Storage.Blobs.BlobRestClient.Download(...)
AZURE_STORAGE_CONNECTION_STRING=DefaultEndpointsProtocol=https;AccountName=acmearchive;AccountKey=Sx5Pkc6c7t5J2MtWNrr3QxbzMooN0enlbAWvOa++teV+fgJEwe6mMlqzirM3VDnZj4IMuYCIdKVZ2OQGopgKLw==;EndpointSuffix=core.windows.net
container: nightly-exports
blobs pending: 0

===== jwt-in-request-log =====
10.2.14.7 - - [14/Aug/2026:13:55:02 +0000] "POST /v1/invoices HTTP/1.1" 401 71 "-" "acme-billing/2.3.1"
upstream_status=401 request_id=6f0b2c4e8a1d
authorization=Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJzdmMtYmlsbGluZyIsImlzcyI6ImF1dGguZXhhbXBsZS5jb20iLCJleHAiOjE3ODgwMDAwMDB9.4vnfVmCrKKJ_apsPn0cxCNU-1PHTYhTd9cTQQYsraCW
reason=token expired at 2026-08-14T13:40:00Z
retry_after=0

===== ssh-private-key-in-log =====
ansible-playbook deploy.yml -l web
TASK [copy deploy key] *********************************************************
fatal: [web1]: FAILED! => {"changed": false, "msg": "Destination directory /root/.ssh does not exist"}
  content: |
    -----BEGIN RSA PRIVATE KEY-----
    N4ULWEj40wSAXV+92U2fV+irTWPZW2p8K3vw6za4wRnizuASJky89NRJ6jMbcfS9
    LAaW0lS/Q/wwz44vhaNklzoa8YSOjWgGk0tKjT/jSrc7eRHXQQwIelGx2nIQUKrQ
    +sRC9KJKsdrZx4y6sLOOlxmThscFYOedQnk6EJGDADU26dOs6YK0on3dHrILwxeY
    GFmm0kHmff7QbWIt5u2ou09P5n5XukKM8wGgT2gSdtvYGt26n4GSeq2YQ8osyaSV
    gh/sXMuNkndLl1pUgAlusan7CicbJJ5o2hQ40J8OFwy9X8daESKG1iDde/2cBc7I
    TMHyupYmQ9L21S3efUuuBTnwj8tFX6Lr4VTdIcBHdzgVAxYDYLqa92+yScMSzNAW
    uBmzeT7RSlsKOF6x64DpJmKpwFlSX5i8RdUWOF7j=
    -----END RSA PRIVATE KEY-----
PLAY RECAP *********************************************************************
web1  : ok=4    changed=1    unreachable=0    failed=1

===== gcp-service-account-json =====
{
  "type": "service_account",
  "project_id": "acme-analytics-4471",
  "private_key_id": "5d4097778ba69615b3b06b9e090ab06ca551787d",
  "private_key": "-----BEGIN EC PRIVATE KEY-----\nPhLFFJG4n4HGEssN6C1ezczvg5GlJywwk6P50V0erWWRsRXhkwxoIASE38iDVhxi\nFhj+y7MqsQGuf9mQ/S8DiMoGoTRsRCok6qJtXlttgszL2hymSQx/0DHYlgcaHNhk\nl2r9HOD22qccC/yTuh3ewd76wYP9+biH6QgX5w9F2ucabfpKUyXE82272eAia3Xl\nRzXATfry73iZ0nTHQWpUUOpolfA6HeSrUS3GEasD=\n-----END EC PRIVATE KEY-----",
  "client_email": "bq-loader@acme-analytics-4471.iam.gserviceaccount.com",
  "token_uri": "https://oauth2.googleapis.com/token"
}

===== payment-processing-log =====
2026-08-14 14:02:11 INFO  charge.attempt order=A-88213 amount=4990 currency=EUR
2026-08-14 14:02:11 DEBUG gateway payload card=4539281402612756 exp=11/29 cvc=***
2026-08-14 14:02:12 WARN  charge.declined order=A-88213 code=insufficient_funds
2026-08-14 14:02:19 DEBUG gateway payload card=5412455030940016 exp=03/28 cvc=***
2026-08-14 14:02:20 INFO  charge.captured order=A-88213 amount=4990

===== github-oauth-callback =====
[oauth] exchanging code for token
[oauth] POST https://github.com/login/oauth/access_token -> 200
[oauth] access_token=gho_6at2Au1P2f96VNtjCLI0UfzcXyfdMhdy09KY scope=repo,read:org token_type=bearer
[oauth] storing under user 40219
[oauth] GET https://api.github.com/user -> 200 login=acme-ci-bot

===== terraform-apply-output =====
Terraform will perform the following actions:

  # aws_iam_access_key.ci will be created
  + resource "aws_iam_access_key" "ci" {
      + id     = "AKIAS848NZIH8SH6OY2G"
      + secret = "yleJSiyhphrrNlYj2uyPGrbVfMe6FBNVtXjBHc7+"
      + status = "Active"
      + user   = "ci-deployer"
    }

Plan: 1 to add, 0 to change, 0 to destroy.
Apply complete! Resources: 1 added, 0 changed, 0 destroyed.

===== jenkins-console-mixed =====
Started by user ci-runner
Building in workspace /var/lib/jenkins/workspace/widget-release
[widget-release] $ /bin/sh -xe /tmp/jenkins1837.sh
+ export STRIPE_SECRET_KEY=sk_live_mgpaxYbyeXz7G8HpO0FDD2nY
+ export NPM_TOKEN=npm_2gMpGtfUS9eiyda7ZpVrerlrHQkHi76wxIFl
+ npm ci --omit=dev
added 214 packages in 9s
+ npm run build
Build step 'Execute shell' marked build as success
Finished: SUCCESS

===== pip-index-url-with-password =====
$ pip install acme-sdk==2.1.0
Looking in indexes: https://pypi.org/simple, https://builder:eoPFLr8mXCn8kMhGbW@pypi.internal.example.com/simple
  WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken
ERROR: Could not find a version that satisfies the requirement acme-sdk==2.1.0
ERROR: No matching distribution found for acme-sdk==2.1.0

===== ai-gateway-upstream-errors =====
2026-08-24T09:14:02Z INFO  proxy: upstream returned 401, dumping request for support
2026-08-24T09:14:02Z DEBUG proxy: {"upstream":"groq","auth":"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","model":"llama-3.3-70b"}
2026-08-24T09:14:03Z DEBUG proxy: {"upstream":"xai","auth":"xai-ndSzlWHh6HLIkEUrJh4ykLY41nhyxoA7GpiJHyGKEZmffyGz","model":"grok-3"}
2026-08-24T09:14:03Z DEBUG proxy: {"upstream":"perplexity","auth":"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","model":"sonar-pro"}
2026-08-24T09:14:04Z DEBUG proxy: {"upstream":"fireworks","auth":"fw_s3tbUpcEK3WqKBLmyJFsXFrMiYTb","model":"mixtral"}
2026-08-24T09:14:04Z WARN  proxy: 4 of 4 upstreams rejected, falling back to cache

===== inference-worker-traceback =====
Traceback (most recent call last):
  File "/srv/worker/pipeline.py", line 118, in run_step
    client = replicate.Client(api_token="r8_KkfGKEKv9UG9b40K9n9dwbz9aQ1NvA9AFQz4Q")
  File "/srv/worker/pipeline.py", line 141, in embed
    index = pinecone.Index(api_key="pcsk_jH7G0B_HKIq8QkD7PkErfX3oPy1Nm4Y7U01gPSCZ2zdg6aF", host="idx-4a91.svc.pinecone.io")
  File "/srv/worker/pipeline.py", line 166, in narrate
    audio = eleven.generate(voice="rachel", key="sk_b797f6169a34be3642691072341a96305af6aaf9d5950924")
requests.exceptions.HTTPError: 401 Client Error: Unauthorized
worker exited with status 1 after 4.812s

===== platform-cli-auth-failures =====
$ make bootstrap
doppler  : using cached credential dp.pt.XioYr0ln2m7mtZbZj2Hb588D8eKGEk5bgMD3ByGq
databricks: workspace 4471 rejected dapi634fd9542f642607dc657bef8613f968 (403)
grafana  : provisioning datasource with glsa_ce3VgrGx9eapEhJGvlqCMEJWQEyKuokI_f814ceac
pscale   : branch "staging" not found for pscale_tkn_C7CASX5cuCGvcAciRyfx5qeOBKuGiN8aIhkkPCOh
supabase : project ref mismatch, sent sbp_07618fb064d9badd3adbf76b9f68efeb033b9ba7
netlify  : deploy aborted, nfp_zIIEfncPaEIfCsEuNVgTjECPwUPhnOwU6Om5 lacks build:write
tailscale: node registration failed with tskey-auth-kEQQopkztehdm5-vs00OcvscHeuqT8Hgw0Cf1
make: *** [Makefile:22: bootstrap] Error 1

===== ci-publish-step-output =====
##[group]Run ./scripts/release.sh --verbose
+ gem push pkg/acme-2.4.0.gem --key rubygems_71d2618a89a01d62ca6928a2dc36b57ccfac45d6f9e053c5
Pushing gem to https://rubygems.org... 401 Unauthorized
+ dotnet nuget push out/Acme.2.4.0.nupkg -k oy2fqoze38m76941433wq7y8a9p6xcn8hubcb6bif4dsy6
error: Response status code does not indicate success: 403 (Forbidden).
+ sonar-scanner -Dsonar.token=squ_9d14e323551d6ad97951b5511a748b02dae48db0
ERROR: You are not authorized to run analysis. Please contact the project administrator.
+ sentry-cli releases new 2.4.0 --auth-token sntrys_sM0Q2h1Hsmy3jtWkLQCEzK_N_LwQEit_fgTNbOC4UwDEb-x8_c6080ce9e6fb
error: API request failed (http status 401)
+ curl -H "Api-Key: NRAK-NLBGYH9VCODBZVRA97QWY9N80B" https://api.newrelic.com/v2/applications.json
{"error":{"title":"Invalid API key"}}
+ curl -H "Authorization: Api-Token dt0c01.BJ96IR64YX04MMPTN6STQDF1.3448b53042b1bdcf2ea6805f898de14d2f1b5645df2cfe2af9df15281829b0fe" https://abc12345.live.dynatrace.com/api/v2/metrics
{"error":{"code":401,"message":"Token is invalid"}}
+ terraform login --token hY97qfbJxWfzd1.atlasv1.A6FW663MDA5qJStVwFmic11jZbdb7Z6Mnwc209CGO1KFaDa6Sdf2GIjqyx07ziBtM8jB
Error: Failed to retrieve account details: unauthorized
##[error]Process completed with exit code 1

===== webhook-and-oauth-callback-dump =====
[notifier] 2026-08-24 11:02:19 delivery failed, dumping config
[notifier] discord  -> https://discord.com/api/webhooks/8715030390898486892/eUWGVYHFbmRdLx84HafEj7soitS2luhGq0GyZx7l4RWmHq673FqN2tPIGDUk3YqxTE6R
[notifier] slack    -> socket mode, app token xapp-1-AC4EJLPN86E-0626629748879-d2e9a329b652bc14dbe0a96092c9cd6e3c16631965706f2c2df88335c4488296
[notifier] oauth    -> token exchange body: client_id=8814-acme.apps.googleusercontent.com&client_secret=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&grant_type=refresh_token
[notifier] email    -> resend rejected re_eUHltDEE_BZY6WxgFtvq8IOSBcBG5pbu0
[notifier] runbook  -> collection sync used PMAK-645872dc58fd3dbee5040ffe-e5b7a2004886fe13b2d9d2d1a1b6112c3d
[notifier] roster   -> base appNQ4812 read with pat9hFN0dPSG1vNp5.33bb336051f085611955857d086347a5f59ed4bb56d139d10332ff0dd6700a46
[notifier] 6 of 6 channels down, paging on-call

===== edge-aws-secret-ends-in-plus =====
$ terraform apply -var-file=prod.tfvars

Error: error configuring S3 Backend: no valid credential sources found

  on backend.tf line 3, in terraform:
   3:   backend "s3" {

Falling back to the environment the runner exported:
  AWS_ACCESS_KEY_ID=AKIAURQBS6BJBG9KIOCU
  AWS_SECRET_ACCESS_KEY=rTo7A8kiOa2og43qlrJj3QnJEW5Uptd9zXyaJD1+
  AWS_REGION=eu-central-1

===== edge-github-tokens-containing-placeholder-words =====
2026-08-29T11:02:14Z ERROR ci: 2 of 3 tokens rejected by api.github.com
2026-08-29T11:02:14Z DEBUG ci: rotating in GITHUB_TOKEN=ghp_zeHeBvWOScilotcfalseSCXZVjrylD5kdjXF
2026-08-29T11:02:15Z DEBUG ci: previous was GITHUB_TOKEN=ghp_2NSyJC1tI2FKJpPi71p6WoT1jxel3Mmxnull
2026-08-29T11:02:15Z INFO  ci: cache_enabled=false retry_after=null
2026-08-29T11:02:16Z INFO  ci: job failed after 3 attempts

===== edge-openai-project-key-ends-in-hyphen =====
Traceback (most recent call last):
  File "/srv/app/summarise.py", line 61, in <module>
    resp = client.responses.create(model="gpt-4.1", input=doc)
openai.AuthenticationError: Error code: 401 - {'error': {'message': 'Incorrect API key provided: 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. You can find your API key at https://platform.openai.com/account/api-keys.', 'type': 'invalid_request_error', 'code': 'invalid_api_key'}}

===== edge-gitlab-pat-ends-in-hyphen =====
$ glab auth status
  ERROR: failed to validate token: GET https://gitlab.com/api/v4/user: 401
  token in use: glpat-YRp1nT20R8TzBTzSP0X-
  hint: export GITLAB_TOKEN=<token> or run 'glab auth login'

===== edge-confluent-secret-ends-in-slash =====
# client.properties written by the bootstrap script
bootstrap.servers=pkc-abc12.eu-central-1.aws.confluent.cloud:9092
security.protocol=SASL_SSL
sasl.mechanisms=PLAIN
confluent_key: "PKJC11vBfIZXvE3x"
confluent_secret: "zP9R54z0i1cdIYjkAyZ4yLthZQs540j1AmbsNkHHNdDJjBhXlZNkb/eobnW718V/"
session.timeout.ms=45000

===== edge-vault-token-with-letter-prefixed-body =====
[agent] 2026-08-29 11:44:02 renew failed, token is expired
[agent] 2026-08-29 11:44:02 X-Vault-Token: hvs.YMUclgLSbJAqFZvUsapvjzsuYOyrIzTeDd5rQayOPoo07iDJ9hPr4jhPhnYkHQA0SpXp1ehdFSnhvBon1W8jNTjBwaSnCJt
[agent] 2026-08-29 11:44:02 falling back to the AppRole login at auth/approle/login
[agent] 2026-08-29 11:44:03 lease 8f21c4 revoked

===== custom-vendor-prefix-convention =====
[gateway] 2026-08-14 15:11:44 auth failure
[gateway] presented key: acme_live_WbPJCu9Re4vvGlFOXZMflQtmJVGQcmBR
[gateway] key belongs to tenant 8812 (suspended 2026-07-30)
[gateway] returning 402 payment_required

===== ansi-github-actions-raw-log =====
2026-08-31T04:11:02.1234567Z ##[group]Run ./.github/actions/deploy
2026-08-31T04:11:02.1240118Z with:
2026-08-31T04:11:02.1244902Z   environment: production
2026-08-31T04:11:02.1249330Z   region: eu-central-1
2026-08-31T04:11:02.4410883Z ##[endgroup]
2026-08-31T04:11:03.0028114Z $ aws sts get-caller-identity
2026-08-31T04:11:03.5510227Z An error occurred (InvalidClientTokenId) for key AKIALH9GA4LZ4CCQ5HW1
2026-08-31T04:11:03.5512004Z AWS_SECRET_ACCESS_KEY=4Lo1foNMOA4ae2qhbQER2qhIQ5fIEJzwFfBPOOgj
2026-08-31T04:11:03.9910044Z GITHUB_TOKEN=ghp_Sc4m1dqzFFY2MTPdaxpvaAOGfP4VlMscPWHB
2026-08-31T04:11:04.1120993Z ##[error]Process completed with exit code 255.

===== ansi-docker-compose-logs =====
web-1     | 2026-08-31 04:12:41 INFO  boot: connecting to primary
web-1     | 2026-08-31 04:12:41 ERROR pg: password authentication failed for user "app"
web-1     |   dsn=postgres://app:nFY9rsMvrKdtHBuPPcCG1vUD@db.internal:5432/orders
worker-1  | 2026-08-31 04:12:42 WARN  sync: upstream returned 401, dumping the header it sent
worker-1  |   Authorization: Bearer oc-c7wPtW1dGYQ7OV4D05CPXWjvEHgtSHDMh0kHmF3f7
db-1      | 2026-08-31 04:12:42 LOG:  connection authorized: user=app database=orders
web-1     | 2026-08-31 04:12:43 FATAL boot: giving up after 3 attempts
web-1 exited with code 1

===== ansi-pytest-npm-publish-failure =====
________________________ test_publish_release _________________________

    def test_publish_release(tmp_path):
        write_npmrc(tmp_path, token=os.environ["NPM_TOKEN"])
>       assert publish(tmp_path) == 0
E       AssertionError: npm exited 1
--------------------------- Captured stderr call ---------------------------
npm error code E401
npm error 401 Unauthorized - PUT https://registry.npmjs.org/@acme%2fwidget
npm error sent //registry.npmjs.org/:_authToken=npm_9HFFJOJwJZk1gtaWmC6q4j5NyT1tuBDeoBGt
FAILED test/release/test_publish.py::test_publish_release
1 failed, 118 passed in 12.08s

===== ansi-terraform-plan-diff =====
Terraform will perform the following actions:

  # kubernetes_secret.mailer will be created
  + resource "kubernetes_secret" "mailer" {
      + data = {
          + "SENDGRID_API_KEY" = "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"
          + "SESSION_SECRET"   = "pSzNqEDmrq1tIhJ0Kyt0SkA976AxPOQfxnEDOqmP"
        }
      + id = (known after apply)
    }

Plan: 1 to add, 0 to change, 0 to destroy.
Error: Failed to save state: the plan above was printed to the job log

===== hard-shapeless-password =====
# support ticket #44812, pasted by the customer
I ran the importer like you said:
  $ acme-import --user warehouse --password correct-horse-staple data/aug.csv
and it still says "permission denied on table stock_levels".
Do I need the admin account for this?

===== hard-capability-url =====
[export-worker] 2026-08-14 16:02:19 job 5512 finished, 84,102 rows
[export-worker] signed link (valid 7 days), sent to the requester:
[export-worker]   https://files.acme.io/d/QVgzvdR8Bm5dxXQ3LKlU3wThwB/aug-ledger.csv
[export-worker] no auth required on that path by design
[export-worker] job 5512 archived

===== hard-token-split-across-lines =====
2026-08-14 15:40:02 ERROR remote rejected: bad credentials
2026-08-14 15:40:02 ERROR sent header "Authorization: token ghp_w4p47e97ZaWlxQvOxnUT
2026-08-14 15:40:02 ERROR jbmzTNKR9iEIc6kC"
2026-08-14 15:40:02 ERROR give up, 3 of 3 attempts used