chore(source-control): finish the public-data credential sweep left from #8282

Aperta
#13,819 3 commenti 0 reazioni 1 assegnatario Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

@kyle-sexton ci sta già lavorando.

Dal 6/11/2026.

Valutazione

Questa issue non è ancora stata valutata.

Descrizione

host-run priority: medium status: confirmed work-class: read-only

The rest of #8282's credential-sweep item, moved here so #8282 can close with its floor audit posted (audit, interim sweep, 10 of 11 public repos). Host-run: the sweep runs as a paced local job on melo-lap-001.

  • The paced claude-code-plugins sweep (scripts/credential-sweep.sh --interval 1 --reserve 1500, started 2026-11-06T06:58Z) finishes, and its summary lists every hit triaged by credential type, or "no credential found" with the counts swept. A hit is triaged by re-reading only its source with values masked; no value is ever posted. A real credential goes to the hub as a HIGH item at once.
  • The 97 gaps from the interim sweep are re-swept or recorded as unreadable: 95 ci-runner .dockerbuild artifacts whose size the script could not read, 1 ci-workflows log stream error, 1 standards log 404.
  • A delta sweep covers every public org repo from each repo's sweep end to 2026-11-18, so the window #8282 named closes on its date.
  • The C19 sweep (the lane's own default-deny restrictions, #8282's second box) is defined and run, or closed as having no definition: no record found names C19 beyond #8282's checkbox.

Not here: the GHSA-gg78 leftovers G1, G2, G3 and G9 and the floor decision, which wait for the hardening pass (owner Q16, 2026-10-29: "There should be no path restrictions. We can add that in later.").

Lingua principale
Shell
Stelle
22
Fork
2
Merge medio
1h 13m
PR unite (30g)
954

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di melodic-software/claude-code-plugins

Tutte le issue di melodic-software/claude-code-plugins

Issue simili

Altre issue su Shell/Bash

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.