ci: baseline three historical github-pat findings by exact fingerprint #213
Open
forge-recovery
wants to merge 1 commits from
ci/secrets-historical-baseline into develop
pull from: ci/secrets-historical-baseline
merge into: KofTwentyTwo:develop
KofTwentyTwo:develop
KofTwentyTwo:feature/security-findings-2026-10
KofTwentyTwo:dependabot/npm_and_yarn/webview/npm_and_yarn-3ac77625be
KofTwentyTwo:dependabot/npm_and_yarn/webview/packages/bus/npm_and_yarn-c86b58a346
KofTwentyTwo:dependabot/npm_and_yarn/webview/vitejs/plugin-react-6.0.2
KofTwentyTwo:dependabot/npm_and_yarn/webview/vite-8.0.13
KofTwentyTwo:dependabot/npm_and_yarn/webview/zustand-5.0.13
KofTwentyTwo:dependabot/npm_and_yarn/webview/types/node-25.9.1
KofTwentyTwo:dependabot/npm_and_yarn/webview/vitest-4.1.6
KofTwentyTwo:dependabot/github_actions/actions/setup-node-6
KofTwentyTwo:dependabot/github_actions/github/codeql-action-4
KofTwentyTwo:dependabot/github_actions/actions/checkout-6
KofTwentyTwo:dependabot/github_actions/actions/cache-5
KofTwentyTwo:dependabot/github_actions/pnpm/action-setup-6
KofTwentyTwo:feat/local-first-llm-routing
KofTwentyTwo:docs/local-first-llm-routing-spec
KofTwentyTwo:fix/v0.2-wave-1-code-fixes
KofTwentyTwo:docs/v0.2-wave-1-doc-drift
KofTwentyTwo:docs/handoff-2026-05-14
KofTwentyTwo:docs/multi-runner-inventory
KofTwentyTwo:docs/ollama-baseline-58
KofTwentyTwo:fix/ci-env-harness-sqlite-voice-warmup
KofTwentyTwo:fix/ci-xcode-26-and-batcher-timing
KofTwentyTwo:chore/typecheck-blocking
KofTwentyTwo:fix/hud-typecheck-strict-undefined
KofTwentyTwo:wip/voice-log-menu-stash4
No Reviewers
Labels
Clear labels
area:agent
area:build
area:bus
area:devtool
area:hud
area:logging
area:mcp
area:memory
area:vision
area:voice
audit-finding
bug
carry-forward
comment-cleanup
dependencies
documentation
duplicate
enhancement
epic
good first issue
help wanted
invalid
javascript
migration
question
severity:critical
severity:high
severity:low
severity:medium
wontfix
Something isn't working
Comment / docstring cleanup per .planning/code-commenting-guide.md
Dependency updates
Improvements or additions to documentation
This issue or pull request already exists
New feature or request
Good for newcomers
Extra attention is needed
This doesn't seem right
Pull requests that update javascript code
Further information is requested
This will not be worked on
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: KofTwentyTwo/Jarvis#213
Reference in new issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Baselines the three historical
github-patfindings that make the central secrets scan fail (Jarvissecretsjob, run 821 / job 8631).Change (1 file)
.gitleaksignore(new): the exact three fingerprints, no path or rule wildcards:23917e58f261ed49d26aac9424f50bd8803bda13:packages/Logging/Tests/JarvisLoggingTests/RedactTests.swift:github-pat:334335167ebf669ab43d759b86969c543400eb456d:.planning/phases/01-foundations/01-02-keychain-config-logging-PLAN.md:github-pat:10154335167ebf669ab43d759b86969c543400eb456d:.planning/phases/01-foundations/01-02-keychain-config-logging-PLAN.md:github-pat:1372Both commits are dated 2026-04-22, before the 2026-11-01 cutover. This is the existing owner-approved pre-existing-findings baseline; it is not a remediation and
allows no new secret. No file content was read or changed, and no provider or auth call was made with the findings.
Evidence (pinned gitleaks 8.21.2, full reachable history,
--redact=100, fingerprints and counts only)leaks found: 3, exactly the three fingerprints above.no leaks found, exit 0.github-patfinding, exit 1. Nothing about the value was printed or kept.Not in this PR
No source, compiler, keychain, workflow or SwiftPM change. The red duplicate-link check on the native packages is separate and is being fixed in the shared native flags; do not merge this while required checks are red.
Co-Authored-By: Claude Sonnet 5.5 noreply@anthropic.com
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.