- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
placeholders across 24 files (review-named 12 + noise-audit finds:
WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)
17 lines
393 B
Markdown
17 lines
393 B
Markdown
|
||
主机名:xjc-app
|
||
账号:devman
|
||
登录方式:密钥id_devman
|
||
账号密码:{{SECRET_XJC_APP_DEVMAN}}(实际值见 Vaultwarden)
|
||
IP:10.100.101.186(动态IP)
|
||
|
||
```id_devman
|
||
{{SECRET_SSH_ID_DEVMAN}}(完整 OpenSSH 私钥已移入 Vaultwarden「xjc-app / id_devman」条目,本文件不再保存正文)
|
||
```
|
||
|
||
```
|
||
Host xjc-app
|
||
User devman
|
||
IdentityFile ~/.ssh/id_devman
|
||
```
|