metadata:
  annotations:
    prow.k8s.io/context: pull-verify-secret-scan
    prow.k8s.io/job: pull-verify-secret-scan
  creationTimestamp: "2026-04-22T01:28:35Z"
  generation: 10
  labels:
    component: jenkins
    created-by-prow: "true"
    env: cicd
    event-GUID: none
    owner: wei_zheng
    prow.k8s.io/build-id: "2046763061338968064"
    prow.k8s.io/context: pull-verify-secret-scan
    prow.k8s.io/id: 55a36dbe-ede3-4fd1-9515-8d73f161bee6
    prow.k8s.io/is-optional: "false"
    prow.k8s.io/job: pull-verify-secret-scan
    prow.k8s.io/refs.base_ref: main
    prow.k8s.io/refs.org: PingCAP-QE
    prow.k8s.io/refs.pull: "4186"
    prow.k8s.io/refs.repo: ci
    prow.k8s.io/type: presubmit
    team: qe
  name: 55a36dbe-ede3-4fd1-9515-8d73f161bee6
  namespace: apps
  resourceVersion: "1776821326101967011"
  uid: cbbf0504-cf31-4ccc-bd7d-a792a01c950b
spec:
  agent: kubernetes
  cluster: default
  context: pull-verify-secret-scan
  decoration_config:
    gcs_configuration:
      bucket: gs://prow-tidb-logs
      path_strategy: explicit
    gcs_credentials_secret: gcs-credentials
    utility_images:
      clonerefs: gcr.io/k8s-prow/clonerefs:v20230601-43eb1068e4
      entrypoint: gcr.io/k8s-prow/entrypoint:v20230601-43eb1068e4
      initupload: gcr.io/k8s-prow/initupload:v20230601-43eb1068e4
      sidecar: gcr.io/k8s-prow/sidecar:v20230601-43eb1068e4
  job: pull-verify-secret-scan
  max_concurrency: 1
  namespace: prow-test-pods
  pod_spec:
    containers:
    - args:
      - |
        apk add --no-cache bash git ripgrep
        bash .ci/verify-jenkins-credential-policy.sh
        sh .ci/verify-secret-scan.sh
      command:
      - sh
      - -ce
      image: zricethezav/gitleaks:v8.30.1
      name: main
      resources:
        limits:
          cpu: 200m
          memory: 256Mi
  prowjob_defaults:
    tenant_id: GlobalDefaultID
  refs:
    base_link: https://github.com/PingCAP-QE/ci/commit/0ab9f0dffb6e3d52a2fe89bdb003d4ce810256c4
    base_ref: main
    base_sha: 0ab9f0dffb6e3d52a2fe89bdb003d4ce810256c4
    org: PingCAP-QE
    pulls:
    - author: wuhuizuo
      author_link: https://github.com/wuhuizuo
      commit_link: https://github.com/PingCAP-QE/ci/pull/4186/commits/00bcb74f18dfd84463bcc4e9a94b579b6d8e17e2
      head_ref: refactor/download-pingcap-oci-artifact-3
      link: https://github.com/PingCAP-QE/ci/pull/4186
      number: 4186
      sha: 00bcb74f18dfd84463bcc4e9a94b579b6d8e17e2
      title: 'refactor(pipelines/tidb): use OCI artifacts and per-stage agents in
        br pipelines'
    repo: ci
    repo_link: https://github.com/PingCAP-QE/ci
  report: true
  rerun_command: /test pull-verify-secret-scan
  type: presubmit
status:
  build_id: "2046763061338968064"
  completionTime: "2026-04-22T01:28:44Z"
  description: Job failed.
  pendingTime: "2026-04-22T01:28:35Z"
  pod_name: 55a36dbe-ede3-4fd1-9515-8d73f161bee6
  prev_report_states:
    gcsk8sreporter: failure
    gcsreporter: failure
    github-reporter: failure
  startTime: "2026-04-22T01:28:35Z"
  state: failure
  url: https://prow.tidb.net/view/gs/prow-tidb-logs/pr-logs/pull/PingCAP-QE_ci/4186/pull-verify-secret-scan/2046763061338968064