You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
HTTP Basic credentials (Basic and base64 of user:password) are masked as [REDACTED:auth-header] wherever they appear, not only after an Authorization
key, and the password inside is masked too. llmpro check and the push guard
report them. A sync stopped by the check on one such line now goes through.
Added
.agentspro/blocklist.json in the store, {"<fingerprint>": "reason"} like the
allowlist, for a secret no rule can find. The sync masks a listed value as [REDACTED:listed], and llmpro check and the push guard report it. The file is
committed and reaches every machine; a fingerprint of a short or common password
can be guessed back, so list only long random values. A new or changed list makes
the next sync redact every file again, and check --history check every blob again.