6 commits

Author	SHA1	Message	Date
rcourtman	a8ee51fb99	Fix code scanning findings	2026-03-28 10:58:57 +00:00
rcourtman	e1e70fd78b	Fix build workflow: remove obsolete pulse-sensor-proxy step ... The cmd/pulse-sensor-proxy directory was removed in a previous refactor but the workflow still referenced it, causing build failures.	2026-02-04 13:58:45 +00:00
rcourtman	07afa94d19	feat(security): add gitleaks secret scanning to pre-commit hook and CI ... Add three layers of secret leak prevention: 1. .gitleaks.toml — config extending the default ruleset (~150 rules for AWS, GCP, Stripe, OpenAI, private keys, JWTs, etc.) with allowlists tuned to suppress false positives from test fixtures and docs. 2. .husky/pre-commit — enhanced with gitleaks protect --staged (graceful skip if not installed), sensitive file type blocking (.pem, .key, .enc, id_rsa, etc.), and broadened fallback patterns covering AWS, OpenAI, GCP, and private key headers alongside existing Stripe checks. 3. .github/workflows/build-and-test.yml — new secret-scan CI job using gitleaks-action that runs in parallel with build on every push/PR, serving as the last gate if someone bypasses local hooks.	2026-02-04 09:52:54 +00:00
rcourtman	9571f3ed0a	ci: add PULSE_DATA_DIR to build-and-test.yml for Go unit tests	2026-01-20 20:06:42 +00:00
rcourtman	98d943edf2	CI: remove unsupported vitest args	2025-11-14 13:41:16 +00:00
rcourtman	c957ccd9e6	Add CI build workflow and tighten proxy diagnostics	2025-11-14 13:32:29 +00:00