Skip to content

v0.1.1

Choose a tag to compare

@JakeSelby JakeSelby released this 16 Sep 19:20
· 547 commits to main since this release

The repository was re-created with a fresh history for this release. The 0.1.0 tag and its
history are gone: the lint in that release embedded a denylist of the maintainer's own
identifiers, which is a disclosure of the very values it existed to catch.

Changed

  • The lint carries no list of real values. It matches personal-data shapes (12-digit account
    ids, email addresses, home-directory paths, cloud ARNs, hosted-zone ids, identity-provider
    tenants, private IPs) and secret patterns everywhere in the tree with no file exempt, derives
    the maintainer's name from LICENSE and CODEOWNERS, and reads personal terms from the
    untracked ~/.config/agent-harness/lint-terms.txt (see lint-terms.example.txt).
  • harness lint --staged and a .githooks/pre-commit hook, installed by harness sync, lint
    every commit in the checkout before it is made.
  • permissions: bypass is refused unless permissions_bypass_acknowledged is true in the
    config file, and is documented as unsuitable for any machine that touches regulated data.
  • Test fixtures assemble identifier-shaped strings at run time, so the tests are linted like
    everything else; a regression test asserts no file in the tree carries an identifier shape.