v0.5.11

Fixes that fit. When the secrets check finds a credential store in plain text, its fix now says what to do for that tool instead of "move it to the keychain": az logout for Azure CLI's token cache, gh auth login to put a GitHub CLI token in the keychain, a credential helper for git and Docker, gcloud auth application-default revoke, terraform logout, an exec plugin for kubeconfig tokens, and so on. The general advice stays when other secrets are found too.

Claude Code guard. On a computer where Claude Code is used and bordercheck guard install has not set up all three hooks, the secrets summary suggests it, whether or not a secret was found.

AI chat history.

• Fewer false alarms: a "password" that is code (another variable, a field, a query string) and a URL whose host is a pattern or an example (host, *.example, .test) are no longer reported.
• bordercheck chats lists every line a repeated secret is on (lines in -json), so deleting it leaves no copy behind.