 windyboy
|
a3ee8c09cf
|
security: scrub live credentials from tracked notes; point values at Vaultwarden
- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
placeholders across 24 files (review-named 12 + noise-audit finds:
WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)
|
2026-09-26 12:26:57 +08:00 |
|
|
windyboy
|
b182762e14
|
refactor(vault): Phase 3 — metadata convergence
- Backfill `created` frontmatter on 266 active notes (git date or mtime)
- Normalize `status` to 4 values: draft/active/done/archived (11 notes)
- Active/进行中/needs-review → active
- archive → archived
- 待执行/conditional → draft
- 完成/accepted → done
- Declare clipper boundary: 04_Archive/Inbox-Clippings/** exempt from migration
- Update depth rule: max 3 → max 4 levels (new notes only)
- Add metadata-converge.mjs script for reproducibility
|
2026-09-26 11:37:19 +08:00 |
|
|
windyboy
|
652bdbc364
|
phase 1: stop the bleeding — untrack 91 files, add verifier, harden CI
- Remove 91 tracked-but-gitignored files from index (sessions, plugin
data/manifests, pycache, memory-changes, obsidian state, credential
notes). Disk files preserved via --cached.
- Add .gitignore rules: .qmd/, .memory-index.lock, *.sqlite-wal/shm,
13 credential note paths.
- Remove filename-blacklist ignore patterns (**/*password*.md etc.)
that caught nothing and misfired on normal notes.
- Add .scripts/verify-vault.mjs: scans git-tracked files for key
patterns (sk-*, AKIA*, gh[pousr]_*, glpat-*, xox*, BEGIN PRIVATE
KEY) and 64-char hex in plugin .json files.
- Add verifier step to CI lint workflow before dependency install.
|
2026-09-26 11:31:48 +08:00 |
|
|
windyboy
|
42953759ff
|
vault backup: 2026-09-11 20:58:25
|
2026-09-11 20:58:25 +08:00 |
|
|
windyboy
|
a05a3f5126
|
Merge remote-tracking branch 'main/main'
|
2026-08-25 07:27:41 +08:00 |
|
|
windyboy
|
f3a0775c85
|
vault backup: 2026-08-25 07:24:00
|
2026-08-25 07:24:00 +08:00 |
|
|
zhiqiang feng
|
a9b4031343
|
add a note
|
2026-08-19 15:39:53 +08:00 |
|
|
windyboy
|
3f67e180e7
|
vault backup: 2026-08-17 17:11:21
|
2026-08-17 17:11:21 +08:00 |
|
|
windyboy
|
8aed04c2e6
|
vault backup: 2026-06-25 08:42:23
|
2026-06-25 08:42:24 +08:00 |
|
|
windyboy
|
40d3fc2b67
|
vault backup: 2026-04-09 11:23:27
|
2026-04-09 11:23:27 +08:00 |
|
|
windyboy
|
b83116eb26
|
vault backup: 2026-01-31 08:25:19
|
2026-01-31 08:25:19 +08:00 |
|
|
windyboy
|
0450479e72
|
vault backup: 2026-01-31 08:24:12
|
2026-01-31 08:24:12 +08:00 |
|
|
windyboy
|
677eac7c0c
|
vault backup: 2026-01-05 19:25:56
|
2026-01-05 19:25:56 +08:00 |
|
|
windyboy
|
be7c6cdcc9
|
vault backup: 2026-01-05 13:03:55
|
2026-01-05 13:03:55 +08:00 |
|