syntaqxA sentence is not a credential, and the g1t plugin is 0.2.10: after a colon, the redactor took the next word as a value, so on flagon-io/g1t a session's own commit message read "A path is not a secret: [redacted] redactor's…". After a colon (YAML, JSON, a header), an unquoted plain word under 16 characters is the sentence going on (prose); password: hunter2, a quoted value, a long run, and anything after = are still hidden. The server (crates/scan/src/redact.rs) and the plugin (hooks/g1t.mjs) agree. What was recorded redacted before stays so. Checked: cargo test -p g1t-scan (73; new: a sentence after a colon), -p g1t-work (214); node --test plugins/claude-code/test/hooks.test.mjs (59); scripts/plugins-release.test.mjs.bcdd402History
- ..
- coordination
- attachments.rs
- authored.rs
- automerge.rs
- checks.rs
- closing.rs
- codeowners.rs
- commit_checks.rs
- commit_comments.rs
- contributions.rs
- decisions.rs
- ghost.rs
- guardrails.rs
- head_repo.rs
- inbox.rs
- insights.rs
- insights.sql
- integration.rs
- labels.rs
- lib.rs
- lifecycle.rs
- merge_message.rs
- mergeability.rs
- merging.rs
- milestones.rs
- prefetch.rs
- pushed.rs
- queue.rs
- queue_tests.rs
- reactions.rs
- retired.rs
- reviews.rs
- rows.rs
- rulesets.rs
- runs.rs
- settings.rs
- statuses.rs
- team_reviews.rs