Skip to content

authentication.md: cite Gitleaks staged and history scanning behind the secret-scan Verify step (TODO 1.295) - #698

Merged
jposluns merged 3 commits into
mainfrom
content/authentication-secret-scan-295
Oct 19, 2026
Merged

jposluns merged 3 commits into
mainfrom
content/authentication-secret-scan-295

Conversation

@jposluns

Copy link
Copy Markdown
Owner

TODO Priority 2 row 1.295: authentication.md's verify-secret-scan claim and the Verify text it summarizes, plus carried note AU1 from #696's QA.

  • Staged scanning: cites Gitleaks v8.30.1 cmd/git.go: its staged and pre-commit flags switch the scan from git log history to git diff.
  • History scanning: cites the v8.30.1 README (already pinned): git mode scans git log -p patches, configurable through --log-opts. The guide's instruction to verify staged, all-ref and merge-commit coverage with the chosen scanner and configuration is kept word for word; statements beyond the cited lines are labelled as this guide's.
  • Supplementary git log search: its stated limits are kept in the claim.
  • AU1: rule 15 and its generated copies now say the cited protocol sources do not establish that an HTML login protects those endpoints.
  • No command changes. TODO row 1.295 moves to DONE.
  • VERSION and plugin/plugin.json 1.0.698; CHANGELOG entry under 2026-10-19; generated files rebuilt.

Local checks run by the integrator on this head (pinned markdown-it-py 4.2.0): tools/run_all_checks.sh passed (All gates passed.).

…he secret-scan Verify step (TODO 1.295)

Gitleaks v8.30.1 cmd/git.go and README; carried note AU1 (rule 15 wording).
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Deploying secureconfig with  Cloudflare Pages  Cloudflare Pages

Latest commit: bd1ad3f
Status: ✅  Deploy successful!
Preview URL: https://0709899b.secureconfig.pages.dev
Branch Preview URL: https://content-authentication-secre.secureconfig.pages.dev

View logs

jposluns and others added 2 commits October 19, 2026 09:37
…round 1)

QA note from both families: the cited lines show the flags at v8.30.1, not that this release introduced them.
@jposluns
jposluns merged commit 283585e into main Oct 19, 2026
2 checks passed
@jposluns
jposluns deleted the content/authentication-secret-scan-295 branch October 19, 2026 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant