tftsr-devops_investigation/.gitea/workflows
Shaun Arman 6373f0b09c
All checks were successful
Test / rust-fmt-check (pull_request) Successful in 1m51s
Test / frontend-tests (pull_request) Successful in 1m51s
Test / frontend-typecheck (pull_request) Successful in 1m55s
Test / rust-clippy (pull_request) Successful in 3m11s
Test / rust-tests (pull_request) Successful in 4m27s
PR Review Automation / review (pull_request) Successful in 4m47s
fix(ci): fix secret scrubbing regex that was deleting legitimate code lines
The previous regex matched any line containing "password", "token", etc.
near certain punctuation characters. This silently removed function
signatures, variable declarations, and test assertions from the context
sent to the LLM — causing it to hallucinate 3 BLOCKERs per review:
- "function signature missing" (the `password: &str` param was scrubbed)
- "filter body empty" (the filter condition containing "password" was scrubbed)
- "password passed unencrypted" (the decrypt_token call line was scrubbed)

Fix: match actual credential VALUES only:
- Well-known token formats (AKIA..., ghp_..., xox...)
- keyword = "long_quoted_literal" (25+ chars, clearly a value not a name)
- Standalone base64 blob lines (60+ chars, PEM-style)

Never scrub a line just because it contains a credential-related word.
2026-05-31 14:33:44 -05:00
..
auto-tag.yml fix(ci): pass release_tag as job output; fix equal-version case; drop git-describe [skip ci] 2026-05-23 22:48:14 +00:00
build-images.yml fix(ci): replace docker:24-cli with alpine + docker-cli in build-images 2026-04-12 20:16:32 -05:00
pr-review.yml fix(ci): fix secret scrubbing regex that was deleting legitimate code lines 2026-05-31 14:33:44 -05:00
test.yml fix(ci): switch PR review from Ollama to liteLLM (qwen2.5-72b) 2026-04-19 18:41:54 -05:00