metadata:
  annotations:
    prow.k8s.io/context: pull-verify-secret-scan
    prow.k8s.io/job: pull-verify-secret-scan
  creationTimestamp: "2026-08-07T15:12:30Z"
  generation: 10
  labels:
    component: jenkins
    created-by-prow: "true"
    env: cicd
    event-GUID: 6690d1d0-9272-11f1-9c6d-0ad90120118f
    owner: wei_zheng
    prow.k8s.io/build-id: "2085745906870652928"
    prow.k8s.io/context: pull-verify-secret-scan
    prow.k8s.io/id: 88f1d758-f33d-451c-b4b7-17a2985448a8
    prow.k8s.io/is-optional: "false"
    prow.k8s.io/job: pull-verify-secret-scan
    prow.k8s.io/refs.base_ref: main
    prow.k8s.io/refs.org: PingCAP-QE
    prow.k8s.io/refs.pull: "4867"
    prow.k8s.io/refs.repo: ci
    prow.k8s.io/type: presubmit
    team: qe
  name: 88f1d758-f33d-451c-b4b7-17a2985448a8
  namespace: apps
  resourceVersion: "1786115649011983015"
  uid: 4e3cdcf8-f13d-443f-a1ea-c396994c88e6
spec:
  agent: kubernetes
  cluster: default
  context: pull-verify-secret-scan
  decoration_config:
    gcs_configuration:
      bucket: gs://prow-tidb-logs
      path_strategy: explicit
    gcs_credentials_secret: gcs-credentials
    utility_images:
      clonerefs: gcr.io/k8s-prow/clonerefs:v20230601-43eb1068e4
      entrypoint: gcr.io/k8s-prow/entrypoint:v20230601-43eb1068e4
      initupload: gcr.io/k8s-prow/initupload:v20230601-43eb1068e4
      sidecar: gcr.io/k8s-prow/sidecar:v20230601-43eb1068e4
  job: pull-verify-secret-scan
  max_concurrency: 1
  namespace: prow-test-pods
  pod_spec:
    containers:
    - args:
      - |
        apk add --no-cache bash git ripgrep
        bash .ci/verify-jenkins-credential-policy.sh
        sh .ci/verify-secret-scan.sh
      command:
      - sh
      - -ce
      image: zricethezav/gitleaks:v8.30.1@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f
      name: main
      resources:
        limits:
          cpu: 200m
          memory: 256Mi
  prowjob_defaults:
    tenant_id: GlobalDefaultID
  refs:
    base_link: https://github.com/PingCAP-QE/ci/commit/3ab163c40adc2a5354fdd652e4bbf0b0fc856f3c
    base_ref: main
    base_sha: 3ab163c40adc2a5354fdd652e4bbf0b0fc856f3c
    org: PingCAP-QE
    pulls:
    - author: wuhuizuo
      author_link: https://github.com/wuhuizuo
      commit_link: https://github.com/PingCAP-QE/ci/pull/4867/commits/02aeb8dedfc7b3d55c6802199c0f7501756e344c
      head_ref: chore/replace-hyperdisk-rwo-with-ci-rwo
      link: https://github.com/PingCAP-QE/ci/pull/4867
      number: 4867
      sha: 02aeb8dedfc7b3d55c6802199c0f7501756e344c
      title: 'chore(ci): use unified ci-rwo storage class and add storage-class policy
        check'
    repo: ci
    repo_link: https://github.com/PingCAP-QE/ci
  report: true
  rerun_command: /test pull-verify-secret-scan
  type: presubmit
status:
  build_id: "2085745906870652928"
  completionTime: "2026-08-07T15:14:07Z"
  description: Job succeeded.
  pendingTime: "2026-08-07T15:12:30Z"
  pod_name: 88f1d758-f33d-451c-b4b7-17a2985448a8
  prev_report_states:
    gcsk8sreporter: success
    gcsreporter: success
    github-reporter: success
  startTime: "2026-08-07T15:12:30Z"
  state: success
  url: https://prow.tidb.net/view/gs/prow-tidb-logs/pr-logs/pull/PingCAP-QE_ci/4867/pull-verify-secret-scan/2085745906870652928