You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add the three missing baseline secret-file patterns (.env, *.pem, *.key) to the root .gitignore so the repository passes the gitignore_secrets_block compliance check.
Implementation Checklist
.gitignore: add .env, *.pem, and *.key entries (and deduplicate the repeated .dev-lead/ entries that exist in the current file)
Tests to Write
Exception: This is a pure configuration change — adding lines to .gitignore. There is no executable code path to exercise with unit or integration tests. The compliance audit itself acts as the acceptance test; additionally a local shell assertion will be run to confirm the patterns are present before declaring done.
.gitignore: added .env, *.pem, and *.key entries; removed 5 duplicate .dev-lead/ lines that were already in the file
Test Results (TDD Exception Applied)
This is a pure configuration change — no executable code path exists to test with unit/integration tests. Local assertion confirms all required patterns are present:
PASS: '.env' is present
PASS: '*.pem' is present
PASS: '*.key' is present
Dev-lead lint check:
[lint] shellcheck on 2 file(s)...
[lint] all checks passed
Files Changed
.gitignore: added .env, *.pem, *.key secret-file baseline patterns; deduplicated the 5 extra .dev-lead/ entries that were already present
Notes
The existing .gitignore had the .dev-lead/ line repeated six times (clearly a formatting artifact). The duplicates were removed as part of this change; the .dev-lead/ entry is preserved exactly once. No other files were modified.
Activity
don-petry commentedon May 29, 2026
Weekly Compliance Audit (2026-05-29)
This finding is still open.
Detail:
.gitignoreis missing baseline secret patterns: .env,.pem,.key — copy the org baseline at /.gitignoreStandard: standards/push-protection.md#required-gitignore-entries
don-petry commentedon May 30, 2026
Weekly Compliance Audit (2026-05-30)
This finding is still open.
Detail:
.gitignoreis missing baseline secret patterns: .env,.pem,.key — copy the org baseline at /.gitignoreStandard: standards/push-protection.md#required-gitignore-entries
don-petry commentedon May 30, 2026
@dev-lead
don-petry commentedon May 30, 2026
@dev-lead
don-petry commentedon May 30, 2026
@don-petry-dev-lead
don-petry commentedon Jun 5, 2026
Weekly Compliance Audit (2026-06-05)
This finding is still open.
Detail:
.gitignoreis missing baseline secret patterns: .env,.pem,.key — copy the org baseline at /.gitignoreStandard: standards/push-protection.md#required-gitignore-entries
don-petry commentedon Jun 6, 2026
Dev-Lead Implementation Plan
Issue: #205 — Compliance: gitignore_secrets_block
Scope
Add the three missing baseline secret-file patterns (
.env,*.pem,*.key) to the root.gitignoreso the repository passes thegitignore_secrets_blockcompliance check.Implementation Checklist
.gitignore: add.env,*.pem, and*.keyentries (and deduplicate the repeated.dev-lead/entries that exist in the current file)Tests to Write
Test Command
bash .dev-lead/scripts/dev-lead-lint.shdon-petry commentedon Jun 6, 2026
Dev-Lead: Implementation Complete
Plan Execution
.gitignore: added.env,*.pem, and*.keyentries; removed 5 duplicate.dev-lead/lines that were already in the fileTest Results (TDD Exception Applied)
This is a pure configuration change — no executable code path exists to test with unit/integration tests. Local assertion confirms all required patterns are present:
Dev-lead lint check:
Files Changed
.gitignore: added.env,*.pem,*.keysecret-file baseline patterns; deduplicated the 5 extra.dev-lead/entries that were already presentNotes
The existing
.gitignorehad the.dev-lead/line repeated six times (clearly a formatting artifact). The duplicates were removed as part of this change; the.dev-lead/entry is preserved exactly once. No other files were modified.feat: implement issue #205 — Compliance: gitignore_secrets_block (#230)
feat: implement issue #205 — Compliance: gitignore_secrets_block (#230)
feat: implement issue #205 — Compliance: gitignore_secrets_block (#230)
feat: implement issue #346 — Compliance: stub-surface-drift-feature-i…