molecule-ai/molecule-core
52
0
Fork 2
Code Issues 185 Pull Requests 55 Actions 2 Packages Projects Releases Wiki Activity

ci(lint): exempt memories.go redaction table from forbidden-env-key scan (#2918) #2934

Merged
devops-engineer merged 1 commits from fix/2918-memories-redaction-exempt into main 2026-06-15 13:42:02 +00:00
Conversation 4 Commits 1 Files Changed 1
+4
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/lint-forbidden-env-keys.yml
+4
View File
@@ -106,6 +106,10 @@ jobs:
"workspace-server/internal/handlers/workspace_provision_forbidden_env_test.go"
"workspace-server/internal/provisioner/provisioner.go"
"workspace-server/internal/provisioner/provisioner_test.go"
# Class 3 — secret redaction table: the quoted forbidden names here
# are category labels for regexps that *strip* secrets from memory
# content, not env-var injection sinks. core#2918.
"workspace-server/internal/handlers/memories.go"
# Class 2 — pre-existing persona-fallback / org-helper paths
# that set the GITEA_TOKEN fallback lane (stripped downstream
# by provisioner.buildContainerEnv per forensic #145). The