Skip to content

Secret hygiene: remove key-shaped test string, ignore env/key files - #4

Merged
daTechGuy merged 1 commit into
mainfrom
chore/secret-hygiene
Oct 4, 2026
Merged

daTechGuy merged 1 commit into
mainfrom
chore/secret-hygiene

Conversation

@daTechGuy

Copy link
Copy Markdown
Owner

Follow-up to the repo secret scan (no real secrets found).

  • Replaces the AIza… dummy in tools/smoke-gemini.ts (which triggered secret-scanning alert Sync with upstream ClassBuild (Codex redesign) + re-home Canvas features #1, a false positive) with a plain string; verified Google returns the same 400 API key not valid.
  • Ignores .env, .env.*, *.pem, *.key (not .env.example).
  • Fixes the stale Gemini comment in .env.example.
  • Replaces the lab IP / key filename in tools/canvas-test docs with placeholders.

Build + 396 tests pass locally.

🤖 Generated with Claude Code

…nericize lab IP

- smoke-gemini: bad-key check uses a plain string (Google returns the same 400),
  so GitHub secret scanning no longer flags an AIza-shaped literal.
- .gitignore: .env, .env.*, *.pem, *.key (keeps .env.example).
- .env.example: fix stale Gemini comment.
- canvas-test docs/scripts: placeholder host and key path.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@daTechGuy
daTechGuy merged commit 4d17e4b into main Oct 4, 2026
1 check passed
@daTechGuy
daTechGuy deleted the chore/secret-hygiene branch October 4, 2026 01:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants