syntaqxA path is not a secret: the redactor's long-random-string rule read a run joined by / as one string, so on flagon-io/g1t a session's own tool call showed as cat "C:[redacted].output" (AppData/Local/Temp/claude/c--Users-…-3fcf65eb-fb45-… is long, mixed-case and has digits). A / now ends a run, and a path is judged a folder at a time. Keys of known formats, prefixed tokens and AWS secret keys are still found by their own rules. Checked: cargo test -p g1t-scan (72; the path is in the ordinary strings now), -p g1t-work (214).6691441History
README.md
g1t/workflows
g1t's own reusable workflows, published from this folder of g1t's
repository to g1t/workflows on g1t.sh by .g1t/workflows/actions-release.yml.
| Workflow | What it does |
|---|---|
.g1t/workflows/deploy.yml | Builds the commit onto g1t.page with g1t/deploy. The deploy workflow g1t manages for a project calls it. |
jobs:
g1t:
uses: g1t/workflows/.g1t/workflows/deploy.yml@v1
with:
project: web
secrets: inherityaml