From 63ebbf503e86d58a6eec2eca394a7559333bdfdd Mon Sep 17 00:00:00 2001 From: Abdelsalam Date: Tue, 28 Jul 2026 23:05:06 +0300 Subject: [PATCH 1/2] Test org ruleset --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index e233562..fa9601b 100644 --- a/README.md +++ b/README.md @@ -13,3 +13,4 @@ appear as red informational checks and Slack alerts; they never block merges. This file is a vendored copy synced from `Astera-org/github-workflows/vendored/secret-scan-diffuse.yml`. Edit it there first, then copy it here. + From 028c74bbabc3f8e22e4e0b660065375accd9a22d Mon Sep 17 00:00:00 2001 From: Abdelsalam Date: Tue, 28 Jul 2026 23:21:10 +0300 Subject: [PATCH 2/2] Remove internal ticket references before going public --- .github/workflows/secret-scan.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml index e4b7938..db86f47 100644 --- a/.github/workflows/secret-scan.yml +++ b/.github/workflows/secret-scan.yml @@ -17,7 +17,7 @@ permissions: env: GITLEAKS_VERSION: 8.30.1 - # Rollout switch (ENG-523): "false" = credential findings warn but do not + # Rollout switch: "false" = credential findings warn but do not # fail the check. Flip to "true" once the fleet-wide rollout is triaged. # Lives here (not a workflow_call input) because required-workflow rulesets # trigger this workflow directly, with no caller to pass inputs. @@ -130,7 +130,7 @@ jobs: set -e if [ "$status" -eq 2 ]; then count=$(jq length /tmp/internal-refs.json) - echo "::warning title=Internal references found::${count} internal Astera reference(s) in history. Fine for a private repo; MUST be resolved before making this repo public (see ENG-523 runbook)." + echo "::warning title=Internal references found::${count} internal Astera reference(s) in history. Fine for a private repo; MUST be resolved before making this repo public." { echo "## Internal references (warn-only): ${count} finding(s)" echo ""