ci-templates

12 Commits

Author	SHA1	Message	Date
root	24a4067bc8	docs: Fingerprint-Format in .betterleaksignore (ohne Commit empfohlen) quality / python-lint (push) Skipped Details quality / node-lint (push) Skipped Details quality / php-lint (push) Skipped Details quality / secret-scan (push) Successful in 6s Details quality / actionlint (push) Successful in 5s Details quality / vuln-scan (push) Successful in 16s Details quality / sast (push) Successful in 29s Details selftest / quality (push) Successful in 35s Details	2026-09-11 10:35:20 +00:00
root	235f7b106a	secret-scan: gitleaks -> betterleaks + zentrale Rausch-Filter quality / python-lint (push) Skipped Details quality / node-lint (push) Skipped Details quality / php-lint (push) Skipped Details quality / secret-scan (push) Successful in 7s Details quality / actionlint (push) Successful in 6s Details quality / vuln-scan (push) Successful in 19s Details quality / sast (push) Successful in 31s Details selftest / quality (push) Successful in 32s Details gitleaks ist feature-frozen (letztes Release 03/2026, nur noch Security-Patches); die Maintainer inkl. Original-Autor entwickeln betterleaks weiter (MIT, aktive Releases, Secret-Validierung). - besserleaks-Standardregeln via [extend] useDefault - [allowlist]: Beispiele (.example/.sample/*.template), i18n-JSON, node_modules/vendor/dist/Lockfiles, Fixtures -> kein Alarm - .env/.env.prod, docker-compose, Code und echte Configs bleiben hart - pro Repo: .betterleaks.toml hat Vorrang, .betterleaksignore fuer akzeptierte Altlasten (Fingerprint je Zeile) - USAGE.md: Abschnitt zum Wechsel + Filterrichtlinie Verifiziert an den 5 auffaelligen Repos: gitleaks 34 Treffer -> betterleaks 58, nach Filterrichtlinie 35 (Rauschen entfernt, echte Funde bleiben).	2026-09-11 09:53:53 +00:00
digiflo	26023818db	docs: accurate adoption modes + visibility limitation quality / python-lint (push) Skipped Details quality / node-lint (push) Skipped Details quality / php-lint (push) Skipped Details quality / secret-scan (push) Successful in 4s Details quality / sast (push) Successful in 19s Details quality / vuln-scan (push) Successful in 11s Details quality / actionlint (push) Successful in 4s Details selftest / quality (push) Successful in 40s Details	2026-08-25 12:47:03 +00:00
digiflo	64c50da902	robust installs (PEP668) + resilient report-only quality / python-lint (push) Skipped Details quality / node-lint (push) Skipped Details quality / php-lint (push) Skipped Details quality / secret-scan (push) Successful in 5s Details quality / sast (push) Successful in 20s Details quality / vuln-scan (push) Successful in 11s Details quality / actionlint (push) Successful in 3s Details selftest / quality (push) Successful in 40s Details	2026-08-25 12:42:09 +00:00
digiflo	ae94d4a4a1	selftest w/o inputs (default-on) quality / python-lint (push) Skipped Details quality / node-lint (push) Skipped Details quality / php-lint (push) Skipped Details quality / secret-scan (push) Successful in 4s Details quality / sast (push) Failing after 3s Details quality / vuln-scan (push) Successful in 12s Details quality / actionlint (push) Successful in 3s Details selftest / quality (push) Failing after 24s Details	2026-08-25 12:38:31 +00:00
digiflo	9daa8b557b	opt-out semantics for default-on scans quality / python-lint (push) Skipped Details quality / node-lint (push) Skipped Details quality / php-lint (push) Skipped Details quality / secret-scan (push) Successful in 5s Details quality / sast (push) Failing after 4s Details quality / vuln-scan (push) Successful in 11s Details quality / actionlint (push) Successful in 3s Details selftest / quality (push) Failing after 24s Details	2026-08-25 12:38:29 +00:00
digiflo	b0ad23f690	selftest via local reusable ref quality / python-lint (push) Skipped Details quality / node-lint (push) Skipped Details quality / php-lint (push) Skipped Details quality / secret-scan (push) Skipped Details quality / sast (push) Skipped Details quality / vuln-scan (push) Skipped Details quality / actionlint (push) Successful in 3s Details selftest / quality (push) Successful in 4s Details	2026-08-25 12:36:56 +00:00
digiflo	11a23480a1	fix: shell-based blocking, valid schema quality / python-lint (push) Skipped Details quality / node-lint (push) Skipped Details quality / php-lint (push) Skipped Details quality / secret-scan (push) Skipped Details quality / sast (push) Skipped Details quality / vuln-scan (push) Skipped Details quality / actionlint (push) Successful in 3s Details selftest / quality (push) Successful in 3s Details	2026-08-25 12:36:54 +00:00
digiflo	bdc676ac5f	add selftest caller (triggers run)	2026-08-25 12:33:28 +00:00
digiflo	6b9eda8115	add usage docs	2026-08-25 12:33:27 +00:00
digiflo	eacc96abbb	add reusable quality workflow	2026-08-25 12:33:27 +00:00
digiflo	b599156c76	Initial commit	2026-08-25 12:33:27 +00:00