Skip to content

Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.

Deploy

A path is not a secret: the redactor's long-random-string rule read a run joined by / as one string, so on flagon-io/g1t a session's own tool call showed as cat "C:[redacted].output" (AppData/Local/Temp/claude/c--Users-…-3fcf65eb-fb45-… is long, mixed-case and has digits). A / now ends a run, and a path is judged a folder at a time. Keys of known formats, prefixed tokens and AWS secret keys are still found by their own rules. Checked: cargo test -p g1t-scan (72; the path is in the ordinary strings now), -p g1t-work (214).#396

How this runs on g1t · 32 notes
  • check: `actions/checkout` checks out from g1t.
  • check: `actions/cache/restore`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • plan: `actions/checkout` checks out from g1t.
  • plan: `environment`: the job gets the values its secrets and variables give this environment once the environment's protection rules (required reviewers, a wait timer, which branches may deploy) let it through. Unless it says `deployment: false`, the run records a deployment to it.
  • migrate: `actions/checkout` checks out from g1t.
  • migrate: `actions/cache/restore`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • migrate: `environment`: the job gets the values its secrets and variables give this environment once the environment's protection rules (required reviewers, a wait timer, which branches may deploy) let it through. Unless it says `deployment: false`, the run records a deployment to it.
  • core: `actions/checkout` checks out from g1t.
  • core: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • core: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • core: `actions/cache/restore`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • core: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • core: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • core: `actions/cache/restore`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • core: `environment`: the job gets the values its secrets and variables give this environment once the environment's protection rules (required reviewers, a wait timer, which branches may deploy) let it through. Unless it says `deployment: false`, the run records a deployment to it.
  • edge: `actions/checkout` checks out from g1t.
  • edge: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • edge: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • edge: `actions/cache/restore`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • edge: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • edge: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • edge: `actions/cache/restore`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • edge: `environment`: the job gets the values its secrets and variables give this environment once the environment's protection rules (required reviewers, a wait timer, which branches may deploy) let it through. Unless it says `deployment: false`, the run records a deployment to it.
  • front: `actions/checkout` checks out from g1t.
  • front: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • front: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • front: `actions/cache/restore`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • front: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • front: `actions/cache`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • front: `actions/cache/restore`: g1t keeps the cache per repository: up to 2 GiB an entry and 10 GiB a repository, until it goes 7 days unused, and at most 28 days.
  • front: `environment`: the job gets the values its secrets and variables give this environment once the environment's protection rules (required reviewers, a wait timer, which branches may deploy) let it through. Unless it says `deployment: false`, the run records a deployment to it.
  • smoke: `actions/checkout` checks out from g1t.

Triggered via push

syntaqx6691441main

Status

Succeeded

Total duration

6m 8s

Artifacts

—

deploy.yml· on: push
Plansummary

Deploy plan for 6691441

unitstageactionlivewhy
eventscored9d1388nothing it is built from changed
identitycored9d1388nothing it is built from changed
reposcoredeployd9d13881 changed file (crates/scan/src/redact.rs via crates/scan)
workcoredeployd9d13881 changed file (crates/scan/src/redact.rs via crates/scan)
searchcored9d1388nothing it is built from changed
projectscored9d1388nothing it is built from changed
chatcored9d1388nothing it is built from changed
artifactscored9d1388nothing it is built from changed
telemetrycored9d1388nothing it is built from changed
notifycored9d1388nothing it is built from changed
billingcored9d1388nothing it is built from changed
integrationscored9d1388nothing it is built from changed
webhookscored9d1388nothing it is built from changed
actionscored9d1388nothing it is built from changed
packagescored9d1388nothing it is built from changed
securitycoredeployd9d13881 changed file (crates/scan/src/redact.rs via crates/scan)
deploymentscored9d1388nothing it is built from changed
runnercoredeployd9d13881 changed file (crates/scan/src/redact.rs via crates/scan)
ogcored9d1388nothing it is built from changed
apiedged9d1388nothing it is built from changed
pagesedge2a24415nothing it is built from changed
statusedged9d1388nothing it is built from changed
webfrontc17b2fenothing it is built from changed
sudofrontd9d1388nothing it is built from changed
docsfrontea32f46nothing it is built from changed
core (rust)summary

sccache

Compile requests                     39
Compile requests executed            29
Cache hits                           11
Cache hits (Rust)                    11
Cache misses                         18
Cache misses (Rust)                  18
Cache hits rate                   37.93 %
Cache hits rate (Rust)            37.93 %
Cache timeouts                        0
Cache read errors                     0
Forced recaches                       0
Cache write errors                    0
Cache errors                          0
Compilations                         18
Compilation failures                  0
Non-cacheable compilations            0
Non-cacheable calls                  10
Non-compilation calls                 0
Unsupported compiler calls            0
Average cache write               2.651 s
Average compiler                  1.418 s
Average cache read hit            0.960 s
Failed distributed compilations       0

Non-cacheable reasons:
-                                     4
crate-type                            3
missing input                         3

Cache location                  ghac, name: sccache-v0.18.0, prefix: /sccache/
Base directories                (none)
Version (client)                0.18.0
core (runner-image)summary

sccache

Compile requests                      7
Compile requests executed             2
Cache hits                            1
Cache hits (Rust)                     1
Cache misses                          1
Cache misses (Rust)                   1
Cache hits rate                   50.00 %
Cache hits rate (Rust)            50.00 %
Cache timeouts                        0
Cache read errors                     0
Forced recaches                       0
Cache write errors                    0
Cache errors                          0
Compilations                          1
Compilation failures                  0
Non-cacheable compilations            0
Non-cacheable calls                   5
Non-compilation calls                 0
Unsupported compiler calls            0
Average cache write               2.849 s
Average compiler                  2.639 s
Average cache read hit            0.414 s
Failed distributed compilations       0

Non-cacheable reasons:
-                                     2
missing input                         2
crate-type                            1

Cache location                  ghac, name: sccache-v0.18.0, prefix: /sccache/
Base directories                (none)
Version (client)                0.18.0