Skip to content

Scope bootstrap migration secret-scan fixture - #34

Merged
kcsfelty merged 1 commit into
mainfrom
agent/main-secret-scan-fixtures
Jul 24, 2026
Merged

kcsfelty merged 1 commit into
mainfrom
agent/main-secret-scan-fixtures

Conversation

@kcsfelty

Copy link
Copy Markdown
Contributor

Summary

  • allowlist the known non-secret migration identifier 0008_bootstrap_credentials
  • scope the exemption with AND semantics to the exact literal and scripts/prepare-candidate.mjs
  • preserve all other secret-scan coverage

Context

Protected-main Security identified this migration ID as a squash-only Gitleaks false positive. No credential or secret is present.

@kcsfelty
kcsfelty force-pushed the agent/main-secret-scan-fixtures branch from 3b26b21 to 6028393 Compare July 24, 2026 23:07
@kcsfelty
kcsfelty merged commit 10ce0e1 into main Jul 24, 2026
12 checks passed
@kcsfelty
kcsfelty deleted the agent/main-secret-scan-fixtures branch July 24, 2026 23:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant