metadata:
  annotations:
    prow.k8s.io/context: pull-verify-secret-scan
    prow.k8s.io/job: pull-verify-secret-scan
  creationTimestamp: "2026-05-15T02:47:44Z"
  generation: 10
  labels:
    component: jenkins
    created-by-prow: "true"
    created-by-tide: "true"
    env: cicd
    owner: wei_zheng
    prow.k8s.io/build-id: "2055117900770971648"
    prow.k8s.io/context: pull-verify-secret-scan
    prow.k8s.io/id: 654c7308-ba35-45f5-a454-e7368938b2f6
    prow.k8s.io/job: pull-verify-secret-scan
    prow.k8s.io/refs.base_ref: main
    prow.k8s.io/refs.org: PingCAP-QE
    prow.k8s.io/refs.pull: "4583"
    prow.k8s.io/refs.repo: ci
    prow.k8s.io/type: presubmit
    team: qe
  name: 654c7308-ba35-45f5-a454-e7368938b2f6
  namespace: apps
  resourceVersion: "1778813280224943023"
  uid: 6963ed48-52ee-4021-b184-dc5cc2426750
spec:
  agent: kubernetes
  cluster: default
  context: pull-verify-secret-scan
  decoration_config:
    gcs_configuration:
      bucket: gs://prow-tidb-logs
      path_strategy: explicit
    gcs_credentials_secret: gcs-credentials
    utility_images:
      clonerefs: gcr.io/k8s-prow/clonerefs:v20230601-43eb1068e4
      entrypoint: gcr.io/k8s-prow/entrypoint:v20230601-43eb1068e4
      initupload: gcr.io/k8s-prow/initupload:v20230601-43eb1068e4
      sidecar: gcr.io/k8s-prow/sidecar:v20230601-43eb1068e4
  job: pull-verify-secret-scan
  max_concurrency: 1
  namespace: prow-test-pods
  pod_spec:
    containers:
    - args:
      - |
        apk add --no-cache bash git ripgrep
        bash .ci/verify-jenkins-credential-policy.sh
        sh .ci/verify-secret-scan.sh
      command:
      - sh
      - -ce
      image: zricethezav/gitleaks:v8.30.1@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f
      name: main
      resources:
        limits:
          cpu: 200m
          memory: 256Mi
  prowjob_defaults:
    tenant_id: GlobalDefaultID
  refs:
    base_ref: main
    base_sha: 9e5f57b4c7c24e0ec6457f38e04a31e92b2f7573
    org: PingCAP-QE
    pulls:
    - author: ti-chi-bot
      head_ref: feature/matrix-cache
      number: 4583
      sha: 04334a2e266ad3c02e6177ec116df906b024b832
      title: 'feat(libraries): implement Jenkins run matrix caching'
    repo: ci
  report: true
  rerun_command: /test pull-verify-secret-scan
  type: presubmit
status:
  build_id: "2055117900770971648"
  completionTime: "2026-05-15T02:47:59Z"
  description: Job succeeded.
  pendingTime: "2026-05-15T02:47:44Z"
  pod_name: 654c7308-ba35-45f5-a454-e7368938b2f6
  prev_report_states:
    gcsk8sreporter: success
    gcsreporter: success
    github-reporter: success
  startTime: "2026-05-15T02:47:44Z"
  state: success
  url: https://prow.tidb.net/view/gs/prow-tidb-logs/pr-logs/pull/PingCAP-QE_ci/4583/pull-verify-secret-scan/2055117900770971648