chore(source-control): finish the public-data credential sweep left from #8282

Abierto
#13,819 3 comentarios 0 reacciones 1 asignado Ver en GitHub

Los mantenedores suelen responder en 1 día

@kyle-sexton ya está trabajando en esto.

Desde el 6/11/2026.

Evaluación

Este issue todavía no se ha evaluado.

Descripción

host-run priority: medium status: confirmed work-class: read-only

The rest of #8282's credential-sweep item, moved here so #8282 can close with its floor audit posted (audit, interim sweep, 10 of 11 public repos). Host-run: the sweep runs as a paced local job on melo-lap-001.

  • The paced claude-code-plugins sweep (scripts/credential-sweep.sh --interval 1 --reserve 1500, started 2026-11-06T06:58Z) finishes, and its summary lists every hit triaged by credential type, or "no credential found" with the counts swept. A hit is triaged by re-reading only its source with values masked; no value is ever posted. A real credential goes to the hub as a HIGH item at once.
  • The 97 gaps from the interim sweep are re-swept or recorded as unreadable: 95 ci-runner .dockerbuild artifacts whose size the script could not read, 1 ci-workflows log stream error, 1 standards log 404.
  • A delta sweep covers every public org repo from each repo's sweep end to 2026-11-18, so the window #8282 named closes on its date.
  • The C19 sweep (the lane's own default-deny restrictions, #8282's second box) is defined and run, or closed as having no definition: no record found names C19 beyond #8282's checkbox.

Not here: the GHSA-gg78 leftovers G1, G2, G3 and G9 and the floor decision, which wait for the hardening pass (owner Q16, 2026-10-29: "There should be no path restrictions. We can add that in later.").

Lenguaje dominante
Shell
Estrellas
22
Forks
2
Merge medio
1 h 13 min
PR fusionados (30 d)
954

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de melodic-software/claude-code-plugins

Todos los issues de melodic-software/claude-code-plugins

Issues similares

Más issues de Shell/Bash

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.