SyslogSolution/prose-contracts
7
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity
560 Commits 134 Branches 0 Tags
master
Commit Graph
3 Commits
Author SHA1 Message Date
root 30b2fe3fdc Fix PR #112 security review - restore docs, remove live credentials
PR Pipeline — Authorize → Validate → Review → Merge / auth (pull_request) Successful in 10s
Details
PR Pipeline — Authorize → Validate → Review → Merge / validate (pull_request) Successful in 4s
Details
PR Pipeline — Authorize → Validate → Review → Merge / lint (pull_request) Successful in 3s
Details
PR Pipeline — Authorize → Validate → Review → Merge / ai-review (pull_request) Successful in 3s
Details
PR Pipeline — Authorize → Validate → Review → Merge / gate (pull_request) Successful in 1s
Details
2026-09-17 06:51:52 +00:00
root 8245716286 Remove all hardcoded credentials from repository 
Audit results (all patterns checked across .md, .prose.md, .sh, .py, .js, .ts, .json, .yaml, .yml, .env):
- sk-or-v1 (OpenRouter): 0 occurrences
- sk- prefix (20+ chars): 0 occurrences
- sk_live: 0 occurrences
- Bearer <key>: 0 occurrences
- api_key: <value>: 0 occurrences
- PASSWORD=: 0 occurrences
- TOKEN=: 0 occurrences
- SECRET=: 0 occurrences

Files changed:
- agent-zero-fix-summary.md (removed 2 OpenRouter keys)
- agent-zero-openrouter-key.prose.md (removed 1 OpenRouter key)
- hermes-key-enforcement.prose.md (removed 1 LiteLLM key, 1 external key)
- litellm-api-keys.prose.md (removed 1 LiteLLM key)
- litellm-self-heal.prose.md (removed 1 stale key reference)
- scripts/agent-health-check.py (INFISICAL_TOKEN now required)
- scripts/daily-infra-report.py (EMAIL_PASSWORD now required)
- zulip-health.prose.md (TOKEN references annotated)
 2026-09-17 06:11:42 +00:00
mumuni-bot 274596fdd1 fix: rename agent-zero fix-summary out of contract scan path
PR Pipeline — Authorize → Validate → Review → Merge / auth (pull_request) Successful in 9s
Details
PR Pipeline — Authorize → Validate → Review → Merge / validate (pull_request) Successful in 7s
Details
PR Pipeline — Authorize → Validate → Review → Merge / lint (pull_request) Successful in 11s
Details
PR Pipeline — Authorize → Validate → Review → Merge / ai-review (pull_request) Successful in 7s
Details
PR Pipeline — Authorize → Validate → Review → Merge / gate (pull_request) Successful in 1s
Details 
agent-zero-fix-summary.prose.md has no YAML frontmatter (kind/name/description),
so CI validate fails on every master push that touches it (runs 226-228).
It is a dated session fix-log, not a contract - the durable knowledge already
lives in agent-zero-openrouter-key.prose.md (kind: function, referenced from
the summary). Rename to .md so validate/lint (which scan only *.prose.md)
stop rejecting master; matches repo root docs like cron-prompts-review.md.

Verified live: local validate repro PASS (36 files), prose-lint PASS at
baseline 15 warnings, no new warnings. Intentionally NOT changed: no content
edits, no other files, no contract frontmatter added to non-contract docs.
 2026-09-03 05:02:41 +00:00