fix(security): move the defaulted-credential check out of gitleaks to a tip-scoped lint (BACKLOG #1091) - #555

Merged

wshallwshall merged 19 commits into

mainfrom

claude/builder-1-1091-credential-rule

Aug 24, 2026

Commits on Aug 23, 2026

feat(security): detect a credential defaulted into a shell fallback (BACKLOG #1091)
wshallwshall
committed
970438e
fix(compose): the postgres password shipped a literal default the secret gates cannot see (BACKLOG #1091)

wshallwshall
and
claude
committed
9965050
Merge branch 'main' into claude/builder-1-1091-credential-rule
wshallwshall
authored
c7d0c53
test(tooling): register the gitleaks credential-rule test in the manifest (BACKLOG #1091)

wshallwshall
and
claude
committed
b5a66ab
merge: bring #1091 lane up to main before relocating the credential-default check
wshallwshall
committed
5313d82
fix(security): move the defaulted-credential check out of gitleaks to the tip (BACKLOG #1091)

wshallwshall
and
claude
committed
33b291e
merge: bring #1091 lane up to main f5c464e3
wshallwshall
committed
6ba61d2
Merge branch 'main' into claude/builder-1-1091-credential-rule
wshallwshall
authored
9578431
Merge branch 'main' into claude/builder-1-1091-credential-rule
wshallwshall
authored
fca7d49
Merge branch 'main' into claude/builder-1-1091-credential-rule
wshallwshall
authored
2bcd1eb
Merge branch 'main' into claude/builder-1-1091-credential-rule
wshallwshall
authored
d168569
Merge branch 'main' into claude/builder-1-1091-credential-rule
wshallwshall
authored
67c8397

Commits on Aug 24, 2026