Skip to content

Do not verify Lob keys on forbidden responses - #5189

Open
thiggy1342 wants to merge 1 commit into
trufflesecurity:mainfrom
thiggy1342:lob-403-not-verified
Open

Do not verify Lob keys on forbidden responses#5189
thiggy1342 wants to merge 1 commit into
trufflesecurity:mainfrom
thiggy1342:lob-403-not-verified

Conversation

@thiggy1342

@thiggy1342 thiggy1342 commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Treat Lob 403 Forbidden verification responses as unverified instead of verified
  • Keep 422 Unprocessable Entity as the positive verification signal
  • Add status-code coverage for Lob verification responses

Tests

  • go test ./pkg/detectors/lob

@thiggy1342
thiggy1342 requested a review from a team August 7, 2026 18:30
@thiggy1342
thiggy1342 requested a review from a team as a code owner August 7, 2026 18:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant