Skip to content
Sign up

flagon-io/g1t

public
00

Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.

gitagentscloudflarerustforgemcp

Commit

The redactor's made-up private keys are marked as test values (g1t:allow-secret): push protection read the PEM strings in crates/scan/src/redact.rs's tests (lines 254 and 258) and the plugin's hooks.test.mjs as private keys and refused the push of b8afae4a. Code changes only in comments.

G1t-Session:
ses_01m501jq3vetja2s4a904rs068
syntaqxcommitted Parenta48336fBrowse files
2 files+3−30/2 viewed
+2−2
251251 hidden("open https://x.com/cb?code=abc&state=1&token=t0k3n", "t0k3n");
252252 hidden("GET /file?X-Amz-Signature=deadbeef1234&x=1", "deadbeef1234");
253253 hidden("jwt eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N_XgL0n3I9PlFUP0THsR8U", "dozjgNryP4J3");
254− let pem = "-----BEGIN OPENSSH PRIVATE KEY-----\nb3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQ\n-----END OPENSSH PRIVATE KEY-----\nafter";
254+ let pem = "-----BEGIN OPENSSH PRIVATE KEY-----\nb3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQ\n-----END OPENSSH PRIVATE KEY-----\nafter"; // g1t:allow-secret
255255 let out = redact(pem);
256256 assert!(!out.contains("b3BlbnNzaC1"), "{out}");
257257 assert!(out.ends_with("after"));
258− hidden("-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEA0Z3VS5JJcds3xfn", "MIIEpAIBAAKCAQEA");
258+ hidden("-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEA0Z3VS5JJcds3xfn", "MIIEpAIBAAKCAQEA"); // g1t:allow-secret
259259 }
260260
261261 #[test]
+1−1
323323 ["curl -u admin:pa55word https://x", "pa55word"],
324324 ["open https://x.com/cb?state=1&token=t0k3n", "t0k3n"],
325325 ["jwt eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N", "dozjgNryP4J3"],
326− ["-----BEGIN OPENSSH PRIVATE KEY-----\nb3BlbnNzaC1rZXktdjEAAAAABG5v\n-----END OPENSSH PRIVATE KEY-----", "b3BlbnNzaC1"],
326+ ["-----BEGIN OPENSSH PRIVATE KEY-----\nb3BlbnNzaC1rZXktdjEAAAAABG5v\n-----END OPENSSH PRIVATE KEY-----", "b3BlbnNzaC1"], // g1t:allow-secret
327327 ["here is my key: sk-ant-api03-abcDEF123456ghiJKL, use it", "abcDEF123456ghiJKL"],
328328 ]) {
329329 const out = redact(text);

Comments

Sign in to comment.