nvflare.fuel.utils.job_secret_scanner module

Secret validation for generated NVFlare job configuration files.

warn_on_potential_secrets_in_job_dir(job_dir: str, job_name: str | None = None, context: str = 'generated job file') → List[SecretFinding][source]

Warn about potential secrets in generated job JSON files.

This is a last-line, best-effort scan of the artifact that will be exported, simulated, or submitted. User code under custom/ is intentionally excluded.

Parameters:

  • job_dir – Export root or the generated job directory itself.

  • job_name – Optional job name when job_dir is an export root.

  • context – Description used to identify a scanned file in warning messages.

Returns:

All potential-secret findings emitted while scanning the job.