LearningCircuit 730a17446b fix: remove naive secret detection from whitelist-check (gitleaks handles this) ...

The SECRET_VIOLATIONS check was causing false positives by flagging
legitimate code that references keywords like 'api_key', 'password',
'token' (e.g., class attributes like `requires_api_key = False`).

Gitleaks already runs as a separate workflow and handles secret detection
with context-aware rules that don't produce these false positives.

2025-12-05 00:12:14 +01:00

..

check-file-writes.sh

fix: resolve CI check failures in GitHub Actions workflows (#1197)

2025-12-01 08:21:36 -05:00

file-whitelist-check.sh

fix: remove naive secret detection from whitelist-check (gitleaks handles this)

2025-12-05 00:12:14 +01:00

validate-docker-compose-images.sh

feat: add CI validation for Docker image SHA digest pinning

2025-12-03 12:35:09 +01:00

validate-workflow-images.py

feat: add CI validation for Docker image SHA digest pinning

2025-12-03 12:35:09 +01:00