mirror of
https://github.com/LGUG2Z/komorebi.git
synced 2026-11-14 12:53:43 +01:00
LGUG2Z
511c4b12b7
The owner decided not to rotate the token embedded in the origin URL of ~/komorebi-for-mac (it is how they develop locally) and asked that it be in nothing that is pushed. The plan now says that, replaces the 'rotate now' instruction and checklist item 5 accordingly, and records what was checked: gitleaks with the default rules (which include the GitHub token formats) found no leak in 7609 commits across every ref of the work clone nor in the files of any workspace, and the work clone has no remote URL with credentials. The literal value was not searched (tooling refused to copy a credential into a file); the plan gives the owner a one-line command that reads the token at run time and prints only a count. Verified: documentation only; the scans are the ones described above.