Repository navigation
v0.1.1
The repository was re-created with a fresh history for this release. The 0.1.0 tag and its
history are gone: the lint in that release embedded a denylist of the maintainer's own
identifiers, which is a disclosure of the very values it existed to catch.
Changed
- The lint carries no list of real values. It matches personal-data shapes (12-digit account
ids, email addresses, home-directory paths, cloud ARNs, hosted-zone ids, identity-provider
tenants, private IPs) and secret patterns everywhere in the tree with no file exempt, derives
the maintainer's name fromLICENSEandCODEOWNERS, and reads personal terms from the
untracked~/.config/agent-harness/lint-terms.txt(seelint-terms.example.txt). harness lint --stagedand a.githooks/pre-commithook, installed byharness sync, lint
every commit in the checkout before it is made.permissions: bypassis refused unlesspermissions_bypass_acknowledgedistruein the
config file, and is documented as unsuitable for any machine that touches regulated data.- Test fixtures assemble identifier-shaped strings at run time, so the tests are linted like
everything else; a regression test asserts no file in the tree carries an identifier shape.