Skip to content

v0.1.3

Choose a tag to compare

@github-actions github-actions released this 23 Oct 10:57
· 3 commits to main since this release

Fixed

  • HTTP Basic credentials (Basic and base64 of user:password) are masked as
    [REDACTED:auth-header] wherever they appear, not only after an Authorization
    key, and the password inside is masked too. llmpro check and the push guard
    report them. A sync stopped by the check on one such line now goes through.

Added

  • .agentspro/blocklist.json in the store, {"<fingerprint>": "reason"} like the
    allowlist, for a secret no rule can find. The sync masks a listed value as
    [REDACTED:listed], and llmpro check and the push guard report it. The file is
    committed and reaches every machine; a fingerprint of a short or common password
    can be guessed back, so list only long random values. A new or changed list makes
    the next sync redact every file again, and check --history check every blob again.

Get it