chore(source-control): finish the public-data credential sweep left from #8282

未关闭
#13,819 3 条评论 0 个 reaction 已指派 1 人 在 GitHub 查看

维护者通常 1 天内回复

@kyle-sexton 已经在做这个了。

开始于 2026年11月6日。

评估

这个 Issue 还没有评估数据。

描述

host-run priority: medium status: confirmed work-class: read-only

The rest of #8282's credential-sweep item, moved here so #8282 can close with its floor audit posted (audit, interim sweep, 10 of 11 public repos). Host-run: the sweep runs as a paced local job on melo-lap-001.

  • The paced claude-code-plugins sweep (scripts/credential-sweep.sh --interval 1 --reserve 1500, started 2026-11-06T06:58Z) finishes, and its summary lists every hit triaged by credential type, or "no credential found" with the counts swept. A hit is triaged by re-reading only its source with values masked; no value is ever posted. A real credential goes to the hub as a HIGH item at once.
  • The 97 gaps from the interim sweep are re-swept or recorded as unreadable: 95 ci-runner .dockerbuild artifacts whose size the script could not read, 1 ci-workflows log stream error, 1 standards log 404.
  • A delta sweep covers every public org repo from each repo's sweep end to 2026-11-18, so the window #8282 named closes on its date.
  • The C19 sweep (the lane's own default-deny restrictions, #8282's second box) is defined and run, or closed as having no definition: no record found names C19 beyond #8282's checkbox.

Not here: the GHSA-gg78 leftovers G1, G2, G3 and G9 and the floor decision, which wait for the hardening pass (owner Q16, 2026-10-29: "There should be no path restrictions. We can add that in later.").

主要语言
Shell
星标
22
派生
2
平均合并
1 小时 13 分钟
30 天内合并 PR
954

环境准备

  • 没有 Dockerfile 或 Docker Compose 文件
  • 没有 Pull Request 模板
  • 阅读贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

melodic-software/claude-code-plugins 的其他 Issue

查看 melodic-software/claude-code-plugins 的全部 Issue

相似的 Issue

更多 Shell/Bash Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。