chore: Ignore invalid semgrep issues

maxmilton · maxmilton · commit b0cec481f2c2 · 2025-06-24T19:09:49.000+09:00
diff --git a/build.ts b/build.ts
@@ -137,6 +137,8 @@ async function buildHTML(artifacts: BuildArtifact[]) {
   const cssFile = basename(css.path);
   const jsFile = basename(js.path);
 
+  // nosemgrep: generic.secrets.gitleaks.generic-api-key.generic-api-key
+  const bugboxApiKey = 'AZdUwYn8cACA8WMnLa8QKQ';
   const html = `
     <!doctype html>
     <html lang=en>
@@ -148,7 +150,7 @@ async function buildHTML(artifacts: BuildArtifact[]) {
     <link href=/apple-touch-icon.png rel=apple-touch-icon>
     <title>ekscss REPL</title>
     <link href=/${cssFile} rel=stylesheet>
-    <script src=https://io.bugbox.app/v0/bugbox.js crossorigin data-key=AZdUwYn8cACA8WMnLa8QKQ data-release=${release} data-env=${String(process.env.NODE_ENV)} data-ekscss=${pkg.dependencies.ekscss}></script>
+    <script src=https://io.bugbox.app/v0/bugbox.js crossorigin data-key=${bugboxApiKey} data-release=${release} data-env=${String(process.env.NODE_ENV)} data-ekscss=${pkg.dependencies.ekscss}></script>
     <script src=/${basename(jsFile)} defer></script>
     <noscript>You need to enable JavaScript to run this app.</noscript>
   `
diff --git a/src/macros.ts b/src/macros.ts
@@ -6,6 +6,7 @@ export function interpolate(text: string, values: string[]): string {
 
   // eslint-disable-next-line unicorn/no-array-for-each
   values.forEach((value, index) => {
+    // nosemgrep: javascript.lang.security.audit.detect-non-literal-regexp.detect-non-literal-regexp
     result = result.replace(new RegExp(`%%${String(index + 1)}%%`, 'g'), value);
   });
 
