Kit OC5 7e28a23c22 secret-scan + env-names: shared hash-only tools (Boss 10-01: lanes printed secrets while hunting them) ...

secret-scan reports file:line/commit + lockbox KEY NAME or shape, never a value or fragment;
env-names lists variable names/length/hash only. Same shapes as secret-guard. Seeded-fake tests.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-01 01:17:30 -04:00

..

backup.sh

security: never bundle credential repos to R2 in plaintext

2026-09-23 10:48:42 -04:00

canary.py

canary: end the hub session the login probe opens (journey cleanup rule)

2026-09-23 13:39:55 -04:00

cancel_unrunnable.sh

telemetry: ci.job_cancelled from the janitor; interval_s on heartbeat

2026-09-23 11:27:53 -04:00

cancel_unrunnable.sql

telemetry: ci.job_cancelled from the janitor; interval_s on heartbeat

2026-09-23 11:27:53 -04:00

ci_hygiene.py

guards: Grant-owned findings never block (compute-guard + ci-hygiene)

2026-09-23 20:04:01 -04:00

compute_guard.py

guards: Grant-owned findings never block (compute-guard + ci-hygiene)

2026-09-23 20:04:01 -04:00

env_names.py

secret-scan + env-names: shared hash-only tools (Boss 10-01: lanes printed secrets while hunting them)

2026-10-01 01:17:30 -04:00

guards_report.py

secret-guard: no live credentials in bridged repos (hash-only findings)

2026-09-24 03:01:59 -04:00

import_from_github.py

ci: G11.5 resolved — onboard windy-pro; cloud cells + windytalk; promote script

2026-09-23 09:49:15 -04:00

install_secret_tools.sh

secret-scan + env-names: shared hash-only tools (Boss 10-01: lanes printed secrets while hunting them)

2026-10-01 01:17:30 -04:00

pr_status_bridge.py

bridge + sync: onboard windy-text, windy-call, windy-cell (telephony in scope, GitHub Actions dead since 08-14; deploy.yml disabled)

2026-10-01 01:00:48 -04:00

promote_to_ci.sh

ci: G11.5 resolved — onboard windy-pro; cloud cells + windytalk; promote script

2026-09-23 09:49:15 -04:00

public_secret_scan.py

weekly public secret scan (all 5 GitHub accounts, full history, hash-only)

2026-09-24 03:05:16 -04:00

rerun_ci.sh

rerun_ci.sh: find wg-q in the invoking user home under sudo

2026-09-24 02:38:25 -04:00

secret_guard.py

secret-guard: Twilio shapes (SID/API key, 32-hex secret assignment) + per-kind warn mode

2026-10-01 00:59:05 -04:00

secret_scan.py

secret-scan + env-names: shared hash-only tools (Boss 10-01: lanes printed secrets while hunting them)

2026-10-01 01:17:30 -04:00

secret_shapes.py

secret-guard: Twilio shapes (SID/API key, 32-hex secret assignment) + per-kind warn mode

2026-10-01 00:59:05 -04:00

sync_from_github.sh

bridge + sync: onboard windy-text, windy-call, windy-cell (telephony in scope, GitHub Actions dead since 08-14; deploy.yml disabled)

2026-10-01 01:00:48 -04:00

telemetry_emit.py

push velocity: correlate the SSO-id subquery on the grouped column

2026-09-23 14:06:27 -04:00

vocab_audit.py

G0: cell substrate — invariants made executable

2026-08-11 14:19:28 -04:00