phase 1: stop the bleeding — untrack 91 files, add verifier, harden CI
- Remove 91 tracked-but-gitignored files from index (sessions, plugin data/manifests, pycache, memory-changes, obsidian state, credential notes). Disk files preserved via --cached. - Add .gitignore rules: .qmd/, .memory-index.lock, *.sqlite-wal/shm, 13 credential note paths. - Remove filename-blacklist ignore patterns (**/*password*.md etc.) that caught nothing and misfired on normal notes. - Add .scripts/verify-vault.mjs: scans git-tracked files for key patterns (sk-*, AKIA*, gh[pousr]_*, glpat-*, xox*, BEGIN PRIVATE KEY) and 64-char hex in plugin .json files. - Add verifier step to CI lint workflow before dependency install.
This commit is contained in:
@@ -1,18 +0,0 @@
|
||||
|
||||
|
||||
|
||||
release token:
|
||||
```
|
||||
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
|
||||
```
|
||||
|
||||
|
||||
zeroclaw:
|
||||
```
|
||||
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
|
||||
```
|
||||
|
||||
|
||||
```
|
||||
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
|
||||
```
|
||||
Reference in New Issue
Block a user