You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Added
lcode checks for secrets before the model runs git commit or git push: passwords, keys and
tokens in code or configuration, credentials in URLs (rtsp://user:pass@…), private keys,
tokens with a known form, and .env files, in the lines a commit adds or the commits a push
sends. In ask mode you decide; in auto-edit and yolo the command doesn't run, and the model
is told to move the secret out of the code. /commit and /pr show the findings before you
confirm, and the GitHub Action doesn't commit at all. lcode: allow-secret in a comment allows a
line; secret_check = false turns the check off. See Secrets in commits.