Skip to content

chore: audit committer identity used in git history before public release #98

@constk

Description

@constk

Problem

The git history was authored under a mix of committer identities. Before the repo is made public, the maintainer should review which email addresses appear in the history and decide whether each is appropriate for a public commit log.

Proposed solution

Audit the unique committer / author identities in the history:

```sh
git log --format='%ae' | sort -u
git log --format='%ce' | sort -u
```

Decide per address:

  • Keep — public identity intended for the project.
  • Replace — if a non-public address appears, configure `user.email` to the desired identity for future commits. Rewriting prior history (`git filter-repo`) is invasive and only worthwhile if a leaked address must be removed; document the decision either way.

Also confirm no committer addresses appear in checked-in files:

```sh
git grep -i 'aurecongroup.com|@gmail.com' -- ':!.lock' ':!.svg'
```

Acceptance criteria

  • Unique author/committer addresses listed and reviewed
  • Decision recorded for each (keep / replace going forward / rewrite)
  • Local `git config user.email` set to the intended public identity
  • No unintended addresses appear in tracked files

Priority rationale

One-time pre-publish hygiene; cheap to check, hard to retract once public.

Metadata

Metadata

Assignees

No one assigned

    Labels

    choreMaintenance, tooling, infrasecuritySecurity scanning, secrets, vulns

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions