Skip to content

Harden publication audit reporting#9

Merged
moshehbenavraham merged 2 commits into
mainfrom
fix/codeql-publication-audit
Jul 23, 2026
Merged

Harden publication audit reporting#9
moshehbenavraham merged 2 commits into
mainfrom
fix/codeql-publication-audit

Conversation

@moshehbenavraham

Copy link
Copy Markdown
Owner

Removes text-derived line numbers from secret-scan findings so the validator never logs data derived from candidate secret content. It also checks forbidden publication paths against Git tracking, allowing ignored local operator state while still failing closed for anything publishable. Verified with the publication validator, Python compilation, and Git diff checks.

@moshehbenavraham
moshehbenavraham merged commit 0270284 into main Jul 23, 2026
5 checks passed
@moshehbenavraham
moshehbenavraham deleted the fix/codeql-publication-audit branch July 23, 2026 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant