4 Commits

Author SHA1 Message Date
Rene Fichtmueller
bd4ca738c6 ci: add deterministic changelog-draft workflow
Some checks failed
changelog-draft / changelog-draft (push) Failing after 2s
security-scan / secret-scan (push) Successful in 4s
Drafts CHANGELOG_PENDING.md entries from Conventional Commit subjects on
every push to main -- feat/fix/refactor/perf/security bucketed into
Added/Fixed/Changed, chore/ci/test/docs/style/merge skipped, anything
mentioning internal infra hostnames dropped. No LLM call, no network
access. Never touches CHANGELOG.md -- still needs a human to fold an
entry in. Rolled out fleet-wide from the PeerCortex pilot (2026-07-18).
2026-07-18 07:22:11 +00:00
Rene Fichtmueller (CtX)
ecac7c865e CI: direct gitleaks full-scan (robust to force-push); IP check skips docs/tests 2026-06-23 22:57:11 -01:00
Rene Fichtmueller (CtX)
266d45733d Upgrade CI to gitleaks (entropy + curated rules, max heuristic) 2026-06-23 22:36:15 -01:00
Rene Fichtmueller (CtX)
709e47f1de Add CI secret-scan safeguard (blocks secrets/private-IPs/key-files on push+PR) 2026-06-23 20:56:27 -01:00