windy/my-vault
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

security: scrub live credentials from tracked notes; point values at Vaultwarden

Browse Source 
- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
  placeholders across 24 files (review-named 12 + noise-audit finds:
  WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
  credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)
This commit is contained in:
windyboy
2026-09-26 12:26:57 +08:00
parent f77a4afd50
commit a3ee8c09cf
24 changed files with 77 additions and 75 deletions
Download Patch File Download Diff File Expand all files Collapse all files
04_Archive/Projects/Airport/Dev Env.md
+2 -8
View File
@@ -2,17 +2,11 @@
主机名：xjc-app
账号：devman
登录方式：密钥id_devman
账号密码：Ipower2024
账号密码：{{SECRET_XJC_APP_DEVMAN}}（实际值见 Vaultwarden）
IP：10.100.101.186（动态IP）
```id_devman
-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
QyNTUxOQAAACBIahgzOtvIiFs9sYakfuvDBVDyWTOpJ2mFJ9UHKTWPOwAAAJCr8Cxoq/As
aAAAAAtzc2gtZWQyNTUxOQAAACBIahgzOtvIiFs9sYakfuvDBVDyWTOpJ2mFJ9UHKTWPOw
AAAEBBdD+wjI107ItWAvtejiFNF9fpXXn4kj9PKyzEguRwEkhqGDM628iIWz2xhqR+68MF
UPJZM6knaYUn1QcpNY87AAAAC2Rldm1hbkBnenpuAQI=
-----END OPENSSH PRIVATE KEY-----
{{SECRET_SSH_ID_DEVMAN}}（完整 OpenSSH 私钥已移入 Vaultwarden「xjc-app / id_devman」条目，本文件不再保存正文）
```
```