Skip to content

Compliance: gitignore_secrets_block #205

Closed

Description

@don-petry

Compliance Finding

Category: push-protection
Severity: warning
Check: gitignore_secrets_block

Detail

.gitignore is missing baseline secret patterns: .env,.pem,.key — copy the org baseline at /.gitignore

Standard Reference

standards/push-protection.md#required-gitignore-entries

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.


This issue was automatically created by the weekly compliance audit.

Activity

  1. don-petry commented on May 29, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-29)

    This finding is still open.

    Detail: .gitignore is missing baseline secret patterns: .env,.pem,.key — copy the org baseline at /.gitignore

    Standard: standards/push-protection.md#required-gitignore-entries

  2. don-petry commented on May 30, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-30)

    This finding is still open.

    Detail: .gitignore is missing baseline secret patterns: .env,.pem,.key — copy the org baseline at /.gitignore

    Standard: standards/push-protection.md#required-gitignore-entries

  3. don-petry commented on May 30, 2026

    @don-petry
    ContributorAuthor
  4. don-petry commented on May 30, 2026

    @don-petry
    ContributorAuthor
  5. don-petry commented on May 30, 2026

    @don-petry
    ContributorAuthor

    @don-petry-dev-lead

  6. don-petry commented on Jun 5, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-06-05)

    This finding is still open.

    Detail: .gitignore is missing baseline secret patterns: .env,.pem,.key — copy the org baseline at /.gitignore

    Standard: standards/push-protection.md#required-gitignore-entries

  7. added
    dev-leadFor dev-lead agent pickup
    and removed on Jun 6, 2026
  8. don-petry commented on Jun 6, 2026

    @don-petry
    ContributorAuthor

    Dev-Lead Implementation Plan

    Issue: #205 — Compliance: gitignore_secrets_block

    Scope

    Add the three missing baseline secret-file patterns (.env, *.pem, *.key) to the root .gitignore so the repository passes the gitignore_secrets_block compliance check.

    Implementation Checklist

    • .gitignore: add .env, *.pem, and *.key entries (and deduplicate the repeated .dev-lead/ entries that exist in the current file)

    Tests to Write

    Exception: This is a pure configuration change — adding lines to .gitignore. There is no executable code path to exercise with unit or integration tests. The compliance audit itself acts as the acceptance test; additionally a local shell assertion will be run to confirm the patterns are present before declaring done.

    Test Command

    bash .dev-lead/scripts/dev-lead-lint.sh

  9. don-petry commented on Jun 6, 2026

    @don-petry
    ContributorAuthor

    Dev-Lead: Implementation Complete

    Plan Execution

    • .gitignore: added .env, *.pem, and *.key entries; removed 5 duplicate .dev-lead/ lines that were already in the file

    Test Results (TDD Exception Applied)

    This is a pure configuration change — no executable code path exists to test with unit/integration tests. Local assertion confirms all required patterns are present:

    PASS: '.env' is present
    PASS: '*.pem' is present
    PASS: '*.key' is present
    

    Dev-lead lint check:

      [lint] shellcheck on 2 file(s)...
      [lint] all checks passed
    

    Files Changed

    • .gitignore: added .env, *.pem, *.key secret-file baseline patterns; deduplicated the 5 extra .dev-lead/ entries that were already present

    Notes

    The existing .gitignore had the .dev-lead/ line repeated six times (clearly a formatting artifact). The duplicates were removed as part of this change; the .dev-lead/ entry is preserved exactly once. No other files were modified.

  10. added a commit that references this issue on Jun 8, 2026
  11. added a commit that references this issue on Aug 3, 2026
  12. added 2 commits that reference this issue on Aug 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit findingdev-leadFor dev-lead agent pickup

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions