transceiver-db

rene.fichtmueller/transceiver-db

Fork 0

Commit Graph

Author	SHA1	Message	Date
Rene Fichtmueller	86d1531d52	fix(security): scrub hardcoded DB credentials, untrack training data, add scan allowlist - Replace plaintext tip (transceiver_db) and llm_gateway DB passwords with env-var references guarded by fail-fast checks, across 15 scripts + sql runbook. Covers quoted exports, unquoted psql calls, python env dicts and env-or-hardcoded-default fallbacks. - Untrack training-data/.jsonl (~48MB, kept on disk) and gitignore .jsonl. - Add .security-scan-allowlist for legit false positives: vendor name flexoptix, own homelab infra, sibling-project codenames in the sync journal, env-resolved DB URIs, example placeholders, ML tokenizer tokens. - Pre-push leak scanner goes from 397 to 0 findings, green without --no-verify. Follow-up (not in this commit): rotate the leaked values (llm_gateway first, tip fleet-wide coordinated); git history still holds the old passwords.	2026-07-07 12:06:07 +02:00
Rene Fichtmueller	12a19639fd	fix: seed script accepts category as fallback for missing type field	2026-04-07 01:24:15 +02:00
Rene Fichtmueller	285a91b945	feat(training): add blog-016 through blog-030 — 15 expert training articles Adds 15 Sonnet-quality blog articles for fo-blog-v1 fine-tuning: tutorials, comparisons, tech deep-dives covering 400G/800G topics. Also adds seed-blog-training-data.py script for learning_corpus import.	2026-04-06 17:59:14 +02:00

Author

SHA1

Message

Date

Rene Fichtmueller

86d1531d52

fix(security): scrub hardcoded DB credentials, untrack training data, add scan allowlist

- Replace plaintext tip (transceiver_db) and llm_gateway DB passwords with
  env-var references guarded by fail-fast checks, across 15 scripts + sql runbook.
  Covers quoted exports, unquoted psql calls, python env dicts and
  env-or-hardcoded-default fallbacks.
- Untrack training-data/*.jsonl (~48MB, kept on disk) and gitignore *.jsonl.
- Add .security-scan-allowlist for legit false positives: vendor name flexoptix,
  own homelab infra, sibling-project codenames in the sync journal, env-resolved
  DB URIs, example placeholders, ML tokenizer tokens.
- Pre-push leak scanner goes from 397 to 0 findings, green without --no-verify.

Follow-up (not in this commit): rotate the leaked values (llm_gateway first,
tip fleet-wide coordinated); git history still holds the old passwords.

2026-07-07 12:06:07 +02:00

Rene Fichtmueller

12a19639fd

fix: seed script accepts category as fallback for missing type field

2026-04-07 01:24:15 +02:00

Rene Fichtmueller

285a91b945

feat(training): add blog-016 through blog-030 — 15 expert training articles

Adds 15 Sonnet-quality blog articles for fo-blog-v1 fine-tuning:
tutorials, comparisons, tech deep-dives covering 400G/800G topics.
Also adds seed-blog-training-data.py script for learning_corpus import.

2026-04-06 17:59:14 +02:00

3 Commits