Kit OC5 ea02ade0cb weekly public secret scan (all 5 GitHub accounts, full history, hash-only) ...

scripts/public_secret_scan.py: every PUBLIC repo, every object (incl.
unreachable + PR refs), secret_shapes patterns, excused by the secret-guard
allow list. Output JSON with hash8 + location only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-24 03:05:16 -04:00

..

backup.sh

security: never bundle credential repos to R2 in plaintext

2026-09-23 10:48:42 -04:00

canary.py

canary: end the hub session the login probe opens (journey cleanup rule)

2026-09-23 13:39:55 -04:00

cancel_unrunnable.sh

telemetry: ci.job_cancelled from the janitor; interval_s on heartbeat

2026-09-23 11:27:53 -04:00

cancel_unrunnable.sql

telemetry: ci.job_cancelled from the janitor; interval_s on heartbeat

2026-09-23 11:27:53 -04:00

ci_hygiene.py

guards: Grant-owned findings never block (compute-guard + ci-hygiene)

2026-09-23 20:04:01 -04:00

compute_guard.py

guards: Grant-owned findings never block (compute-guard + ci-hygiene)

2026-09-23 20:04:01 -04:00

guards_report.py

secret-guard: no live credentials in bridged repos (hash-only findings)

2026-09-24 03:01:59 -04:00

import_from_github.py

ci: G11.5 resolved — onboard windy-pro; cloud cells + windytalk; promote script

2026-09-23 09:49:15 -04:00

pr_status_bridge.py

secret-guard: no live credentials in bridged repos (hash-only findings)

2026-09-24 03:01:59 -04:00

promote_to_ci.sh

ci: G11.5 resolved — onboard windy-pro; cloud cells + windytalk; promote script

2026-09-23 09:49:15 -04:00

public_secret_scan.py

weekly public secret scan (all 5 GitHub accounts, full history, hash-only)

2026-09-24 03:05:16 -04:00

rerun_ci.sh

rerun_ci.sh: find wg-q in the invoking user home under sudo

2026-09-24 02:38:25 -04:00

secret_guard.py

secret-guard: triaged allow list (fakes by hash, test PEMs by path)

2026-09-24 03:04:13 -04:00

secret_shapes.py

secret-guard: no live credentials in bridged repos (hash-only findings)

2026-09-24 03:01:59 -04:00

sync_from_github.sh

bridge windy-inbox (new private repo; Windy Drops is build lead)

2026-09-23 20:51:09 -04:00

telemetry_emit.py

push velocity: correlate the SSO-id subquery on the grouped column

2026-09-23 14:06:27 -04:00

vocab_audit.py

G0: cell substrate — invariants made executable

2026-08-11 14:19:28 -04:00