Skip to content
Sign up

flagon-io/g1t

public
00

Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.

gitagentscloudflarerustforgemcp

Commit

A path is not a secret: the redactor's long-random-string rule read a run joined by / as one string, so on flagon-io/g1t a session's own tool call showed as cat "C:[redacted].output" (AppData/Local/Temp/claude/c--Users-…-3fcf65eb-fb45-… is long, mixed-case and has digits). A / now ends a run, and a path is judged a folder at a time. Keys of known formats, prefixed tokens and AWS secret keys are still found by their own rules. Checked: cargo test -p g1t-scan (72; the path is in the ordinary strings now), -p g1t-work (214).

G1t-Session:
ses_01m501jq3vetja2s4a904rs068
syntaqxcommitted Parentc17b2feBrowse files
1 file+5−20/1 viewed
+5−2
6767 static PEM: LazyLock<Regex> =
6868 LazyLock::new(|| re(r"(?s)-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----.*?(?:-----END [A-Z0-9 ]*PRIVATE KEY-----|\z)"));
6969
70−/// A long run that may be random: judged by [`random_looking`].
71−static LONG: LazyLock<Regex> = LazyLock::new(|| re(r"[A-Za-z0-9+/_=-]{32,}"));
70+/// A long run that may be random: judged by [`random_looking`]. A `/`
71+/// ends a run, so a path is judged a folder at a time: joined, its names
72+/// read as one random string (`AppData/Local/Temp/claude/c--Users-…`).
73+static LONG: LazyLock<Regex> = LazyLock::new(|| re(r"[A-Za-z0-9+_=-]{32,}"));
7274
7375 /// A value that names a secret rather than holding one: `$TOKEN`,
7476 /// `${{ secrets.X }}`, `process.env.X`, or one already hidden.
264266 for ordinary in [
265267 "git show 58def4040e93a1dcda5f388f55360f3cd46cd97e",
266268 "services/work/src/coordination/sessions.rs",
269+ r#"cat "C:/Users/syntaqx/AppData/Local/Temp/claude/c--Users-syntaqx-Code-syntaqx-g1t/3fcf65eb-fb45-440a-81ed-c3586c68531a/tasks/bzf08tti3.output""#,
267270 "CoordinationOp::StartAgentSession and ListWorkSessionsArgs",
268271 "MSYS_NO_PATHCONV=1 git show origin/40-g1t_upkeep:.g1t/upkeep.yml",
269272 "Fix the merge queue: it re-tests every pull request after a push",

Comments

Sign in to comment.