syntaqxA sentence is not a credential, and the g1t plugin is 0.2.10: after a colon, the redactor took the next word as a value, so on flagon-io/g1t a session's own commit message read "A path is not a secret: [redacted] redactor's…". After a colon (YAML, JSON, a header), an unquoted plain word under 16 characters is the sentence going on (prose); password: hunter2, a quoted value, a long run, and anything after = are still hidden. The server (crates/scan/src/redact.rs) and the plugin (hooks/g1t.mjs) agree. What was recorded redacted before stays so. Checked: cargo test -p g1t-scan (73; new: a sentence after a colon), -p g1t-work (214); node --test plugins/claude-code/test/hooks.test.mjs (59); scripts/plugins-release.test.mjs.bcdd402History
- ..
- anchors.yml
- artifacts.yml
- branches-ignore.yml
- cache.yml
- codeql.yml
- concurrency.yml
- container-job.yml
- defaults.yml
- dependabot-automerge.yml
- description-and-env.yml
- docker-action.yml
- docker-publish.yml
- environments.yml
- g1t-extension.yml
- go.yml
- if-expressions.yml
- issue-comment.yml
- java-gradle.yml
- job-options.yml
- labeler.yml
- many-events.yml
- matrix-from-json.yml
- max-parallel-expression.yml
- merge-queue.yml
- multiline-and-quotes.yml
- needs-outputs.yml
- node-matrix.yml
- on-null-events.yml
- pages.yml
- permissions-all.yml
- pr-review.yml
- pr-target-paths.yml
- publish-npm.yml
- python-package.yml
- release-on-tag.yml
- repository-dispatch.yml
- reusable-called.yml
- reusable-caller.yml
- runs-on-forms.yml
- rust-ci.yml
- sccache-like.yml
- schedule.yml
- services-postgres.yml
- single-event-string.yml
- stale.yml
- step-options.yml
- workflow-call-and-dispatch.yml
- workflow-dispatch-inputs.yml
- workflow-run.yml