phase 1: stop the bleeding — untrack 91 files, add verifier, harden CI
- Remove 91 tracked-but-gitignored files from index (sessions, plugin data/manifests, pycache, memory-changes, obsidian state, credential notes). Disk files preserved via --cached. - Add .gitignore rules: .qmd/, .memory-index.lock, *.sqlite-wal/shm, 13 credential note paths. - Remove filename-blacklist ignore patterns (**/*password*.md etc.) that caught nothing and misfired on normal notes. - Add .scripts/verify-vault.mjs: scans git-tracked files for key patterns (sk-*, AKIA*, gh[pousr]_*, glpat-*, xox*, BEGIN PRIVATE KEY) and 64-char hex in plugin .json files. - Add verifier step to CI lint workflow before dependency install.
This commit is contained in:
windyboy
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
Reference in New Issue
Block a user