holocron

Defame1297/holocron

Fork 0

Commit Graph

Author	SHA1	Message	Date
Defame1297	ac8235ca58	fix(gitleaks): suppress Token routing false positive; sync allowlists; update roadmap gitleaks false positive (U1, Gitea issue #2): - 'Token routing: Haiku/Sonnet/Opus' in ai-coding-factory-session.md:90 triggers generic-api-key on entropy match of "Token". Not a credential. - ROADMAP.md now documents this pattern and triggers the same rule. - Both .gitleaks.toml (deployed, read by hook) and scripts/gitleaks.toml (source for setup-gitleaks.sh deploys) updated and aligned. Previously out of sync — deployed file had docs/research/.* already; source did not. ROADMAP.md: governance workstream Phase 2 expanded with 7 immediately- actionable test suite gaps and 5 Chunk 6 CI gaps, all mapped to CONTROLS.md requirements. Housekeeping updated with audit entry. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gv5iNACZxumtF2k6TsK18q	2026-06-21 01:33:34 +00:00
Defame1297	25a6a454b9	feat: add gitleaks secret scanning setup and skill - scripts/setup-gitleaks.sh — installs gitleaks v8.24.2, seeds .gitleaks.toml on first run, writes managed pre-commit hook block; re-run replaces block in place without disturbing other hook content - scripts/gitleaks.toml — base config template extending default ruleset - .gitleaks.toml — repo config with docs/research/ path allowlist (high-entropy terminal captures; v8.24.2 [allowlist] syntax) - tests/test-setup-gitleaks.sh — 6 behavior tests including stale-block replacement and idempotency - .agents/skills/gitleaks/ — cross-cutting skill covering install, update, allowlist tuning, scan modes, and real-finding remediation - .agents/evals/cross-cutting/gitleaks/eval.yaml — 7 trigger + 3 output tests including version-aware allowlist guidance case - docs/spec/overview.md — updated to reflect new tooling and skill Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-20 11:29:10 +00:00

Author

SHA1

Message

Date

Defame1297

ac8235ca58

fix(gitleaks): suppress Token routing false positive; sync allowlists; update roadmap

gitleaks false positive (U1, Gitea issue #2):
- 'Token routing: Haiku/Sonnet/Opus' in ai-coding-factory-session.md:90
  triggers generic-api-key on entropy match of "Token". Not a credential.
- ROADMAP.md now documents this pattern and triggers the same rule.
- Both .gitleaks.toml (deployed, read by hook) and scripts/gitleaks.toml
  (source for setup-gitleaks.sh deploys) updated and aligned. Previously
  out of sync — deployed file had docs/research/.* already; source did not.

ROADMAP.md: governance workstream Phase 2 expanded with 7 immediately-
actionable test suite gaps and 5 Chunk 6 CI gaps, all mapped to
CONTROLS.md requirements. Housekeeping updated with audit entry.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Gv5iNACZxumtF2k6TsK18q

2026-06-21 01:33:34 +00:00

Defame1297

25a6a454b9

feat: add gitleaks secret scanning setup and skill

- scripts/setup-gitleaks.sh — installs gitleaks v8.24.2, seeds
  .gitleaks.toml on first run, writes managed pre-commit hook block;
  re-run replaces block in place without disturbing other hook content
- scripts/gitleaks.toml — base config template extending default ruleset
- .gitleaks.toml — repo config with docs/research/ path allowlist
  (high-entropy terminal captures; v8.24.2 [allowlist] syntax)
- tests/test-setup-gitleaks.sh — 6 behavior tests including stale-block
  replacement and idempotency
- .agents/skills/gitleaks/ — cross-cutting skill covering install,
  update, allowlist tuning, scan modes, and real-finding remediation
- .agents/evals/cross-cutting/gitleaks/eval.yaml — 7 trigger + 3 output
  tests including version-aware allowlist guidance case
- docs/spec/overview.md — updated to reflect new tooling and skill

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-20 11:29:10 +00:00

2 Commits