phase 1: stop the bleeding — untrack 91 files, add verifier, harden CI

- Remove 91 tracked-but-gitignored files from index (sessions, plugin data/manifests, pycache, memory-changes, obsidian state, credential notes). Disk files preserved via --cached. - Add .gitignore rules: .qmd/, .memory-index.lock, *.sqlite-wal/shm, 13 credential note paths. - Remove filename-blacklist ignore patterns (**/*password*.md etc.) that caught nothing and misfired on normal notes. - Add .scripts/verify-vault.mjs: scans git-tracked files for key patterns (sk-*, AKIA*, gh[pousr]_*, glpat-*, xox*, BEGIN PRIVATE KEY) and 64-char hex in plugin .json files. - Add verifier step to CI lint workflow before dependency install.
2026-09-26 11:31:48 +08:00
parent acca28b2dd
commit 652bdbc364
95 changed files with 91 additions and 8580 deletions
@@ -1,115 +0,0 @@
-
-
-Storage:
-	azure object:
-	bucket(container): synapse
-	region: West US 2
-	endpoint_url: https://matrixserver.blob.core.windows.net/
-	aws_access_key_id: matrixserver
-	aws_secret_access_key: vuEGDMi5x1DPdYqCkoG3ApOBbq3CppPOa0qExCdWEWgSdxl/puQNsc7kZQ7zI9fX8daWGGGb2yBU+AStj1VVSA==
-	
-	connection: DefaultEndpointsProtocol=https;AccountName=matrixserver;AccountKey=vuEGDMi5x1DPdYqCkoG3ApOBbq3CppPOa0qExCdWEWgSdxl/puQNsc7kZQ7zI9fX8daWGGGb2yBU+AStj1VVSA==;EndpointSuffix=core.windows.net
-
-	flexifyio:
-		Access Key ID
-		FlIO73xaxZt86teyIm4F5N7B
-		Secret Access Key
-		h7gjsbc5QJMWjgmA24wRpWdLCBC9VWmgJv1sm8
-
-
-managed flexifyio:
-Endpoints (S3)
-
-s3.flexify.io
-
-s3.us-east-1.aws.flexify.iocontent_copy
-
-s3.us-west-1.aws.flexify.iocontent_copy
-
-Access key
-
-FlIO6ufBeax0c2II1LI1El2zcontent_copy
-
-Secret key
-
-eTwlfXvsJKkJJRS5lBe0MFI73Mdo9zdR105VTBNU
-		
-	  
-
-
-Endpoint (S3)
-
-stor.chans.xyz
-
-Access key
-
-FlIO8hB9RMewbeOQiDi5omT
-
-Secret key
-
-TY5c8siV7gNwIGJ8wq4dBBzN7MfsF5CAWeywLyze
-
-  
-
-Access Key ID
-FlIO73xaxZt86teyIm4F5N7B
-
-Secret Access Key
-h7gjsbc5QJMWjgmA24wRpWdLCBC9VWmgJv1sm8
-
-
-amazon s3:
-"AWS":"arn:aws:iam::`AccountIDWithoutHyphens`:root"
-"AWS":"arn:aws:iam::587891510942:windyboy"
-
-```json
- 1. {
- 2.   "Version":"2012-10-17",
- 3.   "Statement":[
- 4.     {
- 5.       "Sid":"AddCannedAcl",
- 6.       "Effect":"Allow",
- 7.     "Principal": {"CanonicalUser":"fecdb8da051398108edd3ed57e7e0d8457180461bd14d0a77eec6ea6fbff954a"},
- 8.       "Action":["s3:**"],
- 9.       "Resource":"arn:aws:s3:::windy-matrix/*"
-11.     }
-12.   ]
-13. }
-
-```
-Account name
-
-windyboy
-
-Email address
-
-windyboy@gmail.com
-
-AWS account ID
-
-587891510942
-
-Canonical user ID
-
-fecdb8da051398108edd3ed57e7e0d8457180461bd14d0a77eec6ea6fbff954a
-
-
-access:
-AKIAYRYIQR2POZMGOCM4
-
-Secret access key：
-myoTKuUYxY202mo406tO5wRCtWu3frl1TQkhEpAe
-
-region:
-us-east-1
-
-
-azure:
-account:
-matrixserver
-
-sas:
-uwhhhtwhg0DXJbqHDC+4zsMTUA06SXT3JkO80Tz6zGKoVp58Nbv6y6otlczb7w0sgCXzUD/BesV5+AStnfXHEQ==
-
-string:
-DefaultEndpointsProtocol=https;AccountName=matrixserver;AccountKey=uwhhhtwhg0DXJbqHDC+4zsMTUA06SXT3JkO80Tz6zGKoVp58Nbv6y6otlczb7w0sgCXzUD/BesV5+AStnfXHEQ==;EndpointSuffix=core.windows.net