Shaun Arman 6373f0b09c fix(ci): fix secret scrubbing regex that was deleting legitimate code lines ... The previous regex matched any line containing "password", "token", etc. near certain punctuation characters. This silently removed function signatures, variable declarations, and test assertions from the context sent to the LLM — causing it to hallucinate 3 BLOCKERs per review: - "function signature missing" (the `password: &str` param was scrubbed) - "filter body empty" (the filter condition containing "password" was scrubbed) - "password passed unencrypted" (the decrypt_token call line was scrubbed) Fix: match actual credential VALUES only: - Well-known token formats (AKIA..., ghp_..., xox...) - keyword = "long_quoted_literal" (25+ chars, clearly a value not a name) - Standalone base64 blob lines (60+ chars, PEM-style) Never scrub a line just because it contains a credential-related word.		2026-05-31 14:33:44 -05:00
..
workflows	fix(ci): fix secret scrubbing regex that was deleting legitimate code lines	2026-05-31 14:33:44 -05:00