sec(gitleaks): a low-entropy defaulted credential passes both required secret gates (BACKLOG #1091) - #545

Closed

wshallwshall wants to merge 5 commits into

mainfrom

claude/builder-1-1091-credential-rule

Commits on Aug 23, 2026

feat(security): detect a credential defaulted into a shell fallback (BACKLOG #1091)
wshallwshall
committed
970438e
fix(compose): the postgres password shipped a literal default the secret gates cannot see (BACKLOG #1091)

wshallwshall
and
claude
committed
9965050
Merge branch 'main' into claude/builder-1-1091-credential-rule
wshallwshall
authored
c7d0c53
test(tooling): register the gitleaks credential-rule test in the manifest (BACKLOG #1091)

wshallwshall
and
claude
committed
b5a66ab
Merge branch 'main' into claude/builder-1-1091-credential-rule
wshallwshall
authored
cac1890