Kit OC5 497222094f secret-guard: triaged allow list (fakes by hash, test PEMs by path) ...

Private-key matches are only the BEGIN line (same hash everywhere), so they
are allowed by path+kind; everything else by hash. Real revoked tokens
(1354fc9b, d49dc2ba) are pinned by a test to never be allowed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-24 03:04:13 -04:00

..

app

telemetry: UPDATE 7 — read the ingest body; count quarantined + dropped on heartbeats

2026-09-23 12:32:28 -04:00

tests

secret-guard: triaged allow list (fakes by hash, test PEMs by path)

2026-09-24 03:04:13 -04:00