my-vault/03_Resources/Development/AI-ML/mcp-config.md at a3ee8c09cff52d1b953a17424f2b496901f3f651 - my-vault - windy git

Files

T

windyboy a3ee8c09cf security: scrub live credentials from tracked notes; point values at Vaultwarden

- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
  placeholders across 24 files (review-named 12 + noise-audit finds:
  WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
  credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)

2026-09-26 12:26:57 +08:00

11 lines

118 B

Markdown

Raw Blame History

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

 ---
 created: 2026-01-05
 ---
 context7 mcp key:
 ```
 ctx7sk-{{SECRET_CONTEXT7_MCP}}（实际值见 Vaultwarden）
 ```