Kit OC5 d28da26000 secret-guard: no live credentials in bridged repos (hash-only findings) ...

New guard windy-git/secret-guard (warn-only) over EVERY text file: Telegram,
GitHub, AWS, Slack, Anthropic, OpenAI, Stripe live, Google API keys and
private-key blocks (scripts/secret_shapes.py, shared with the weekly public
scan). A finding carries "<kind> #<sha256[:8]>", never the value (house rule
10). Known fakes allowed BY HASH (ci/secret-guard-allow.yml). GUARDS_STATUS
gets a secrets column. Leak hunt 09-24: @Windy_0_bot token in a public fixture.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-24 03:01:59 -04:00

..

__init__.py

G0: cell substrate — invariants made executable

2026-08-11 14:19:28 -04:00

test_canary_cleanup.py

canary: end the hub session the login probe opens (journey cleanup rule)

2026-09-23 13:39:55 -04:00

test_ci_hygiene.py

test: allow-list entries must be line-scoped (replaces is-empty check)

2026-09-23 19:11:53 -04:00

test_compute_guard.py

guards: Grant-owned findings never block (compute-guard + ci-hygiene)

2026-09-23 20:04:01 -04:00

test_ept_and_throttle.py

throttle: stop claiming to limit pushes we cannot see

2026-08-13 23:33:30 -04:00

test_guards_report.py

secret-guard: no live credentials in bridged repos (hash-only findings)

2026-09-24 03:01:59 -04:00

test_hub_jwt.py

auth: token contract v1 (aud windy_git, both issuers); CI for eternitas

2026-09-23 02:58:56 -04:00

test_invariants.py

ci: mount windy-pro's read-only build inputs into dind; allow exactly that path for jobs

2026-09-23 17:28:48 -04:00

test_pr_status_bridge.py

bridge: post no-Docker smoke jobs (name regex skipped "no Docker")

2026-09-23 20:11:55 -04:00

test_push_velocity.py

push velocity: key humans on windy_identity_id (SSO link); no id -> system + caller

2026-09-23 14:06:27 -04:00

test_secret_guard.py

secret-guard: no live credentials in bridged repos (hash-only findings)

2026-09-24 03:01:59 -04:00

test_telemetry.py

telemetry: UPDATE 7 — read the ingest body; count quarantined + dropped on heartbeats

2026-09-23 12:32:28 -04:00

test_webhooks_behavior.py

test: behavioral G3.5 webhook tests (audit: tests were source-string asserts)

2026-09-23 03:26:14 -04:00