windyadmin/windy-git
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

secret-guard allow: windy-code VS Code public aiKey, windytalk redaction fixture (hash not in lockbox)

Browse Source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
Kit OC5
2026-10-01 00:59:59 -04:00
parent 1c552e94de
commit 53fbcfe78f
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ci/secret-guard-allow.yml
View File

@@ -51,3 +51,9 @@ allow:
paths: ["api/tests/test_secret_guard.py"] paths: ["api/tests/test_secret_guard.py"]
kinds: [private key block] kinds: [private key block]
reason: "The guard's own test uses a PEM header string as a sample." reason: "The guard's own test uses a PEM header string as a sample."
- repo: windy-code
hashes: ["23f32607"]
reason: "VS Code OSS extensions' package.json aiKey: Microsoft's public telemetry (App Insights) key, shipped in every VS Code build; not a Windy credential."
- repo: windytalk
hashes: ["c4189d79"]
reason: "apps/desktop/test/diagnostics.test.ts redaction fixture (hexSecret beside a fake sk-ant token); hash checked against the lockbox 10-01: not present."