Files
my-vault/02_Areas/Personal Development/remark42.md
T
windyboy a3ee8c09cf security: scrub live credentials from tracked notes; point values at Vaultwarden
- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
  placeholders across 24 files (review-named 12 + noise-audit finds:
  WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
  credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)
2026-09-26 12:26:57 +08:00

36 lines
737 B
Markdown

---
title: remark42
created: 2025-12-30
updated: 2025-12-30
tags: []
---
google auth
AUTH_GOOGLE_CID=935204735749-4jvsveemaohtblrip12n2r3jqc3cd9q0.apps.googleusercontent.com
AUTH_GOOGLE_CSEC=yQh4_H7BgeG8mf2_yMy0yE-D
github
AUTH_GITHUB_CID=`62127bb1a774bb05ce16`
AUTH_GITHUB_CSEC=`7d1b0c35b777bdeea30dcb2749908bbe66015156`
```text-plain
AUTH_GITHUB_CID=62127bb1a774bb05ce16
AUTH_GITHUB_CSEC=7d1b0c35b777bdeea30dcb2749908bbe66015156
```
`AUTH_TWITTER_CID=CjyfOrHd6C90Yox97WBOOGYDw`
`AUTH_TWITTER_CSEC=XwxSvqF1Pf9qn8Oyk23EZpTSdlhaG6ybxrSvVqXuOeV5CKssk4`
```text-plain
ADMIN_SHARED_ID=github_20924f5ace2e27ff9b98801b837b8a495308d782
```
```text-plain
NOTIFY_TYPE=telegram
NOTIFY_TELEGRAM_TOKEN={{SECRET_TELEGRAM_REMARK42_BOT}}
```