Commit Graph
7 Commits
Author SHA1 Message Date
windyboy 652bdbc364 phase 1: stop the bleeding — untrack 91 files, add verifier, harden CI
- Remove 91 tracked-but-gitignored files from index (sessions, plugin
  data/manifests, pycache, memory-changes, obsidian state, credential
  notes). Disk files preserved via --cached.
- Add .gitignore rules: .qmd/, .memory-index.lock, *.sqlite-wal/shm,
  13 credential note paths.
- Remove filename-blacklist ignore patterns (**/*password*.md etc.)
  that caught nothing and misfired on normal notes.
- Add .scripts/verify-vault.mjs: scans git-tracked files for key
  patterns (sk-*, AKIA*, gh[pousr]_*, glpat-*, xox*, BEGIN PRIVATE
  KEY) and 64-char hex in plugin .json files.
- Add verifier step to CI lint workflow before dependency install.
2026-09-26 11:31:48 +08:00
Noah Brier b7c726e83b fix: remove frozen-lockfile flag and pnpm cache from GitHub Action 2025-09-17 15:41:14 -04:00
Noah Brier ccf37a114b feat: add GitHub Action for lint checks on PRs 2025-09-17 15:38:09 -04:00
Noah Brier 3909ab476c fix: resolve lonely if ESLint warning 2025-09-15 08:49:07 -04:00
Noah Brier 5e43760fc4 fix: correct GitHub Action allowed_tools configuration
- Move allowed_tools to claude_args parameter
- Use proper --allowed-tools flag format
- Fix GitHub Action validation error
2025-09-14 16:55:42 -04:00
Noah Brier 94869b6b04 feat: configure Claude GitHub Action with permissions and restrictions
- Add write permissions for contents, pull-requests, and issues
- Configure allowed tools for pnpm, git, gh CLI, and file operations
- Restrict Claude activation to repository owner (heyitsnoah) only
- Update init-bootstrap to ask about development work
  - Personal vault users: Remove .github folder and disconnect from origin
  - Contributors: Keep GitHub workflows and origin for development
- Prevents personal vault users from seeing confusing GitHub Actions failures
2025-09-14 16:06:49 -04:00
Noah Brier 537b699498 "Claude PR Assistant workflow" 2025-09-14 15:42:04 -04:00