mirror of
https://github.com/screentinker/screentinker.git
synced 2026-08-13 22:03:13 -06:00
24067c39c4
The complete-tarball step archives `server/` wholesale, and tar includes dotfiles, so any gitignored local config living under it (.env, .mcp.json, key material) is packaged unless excluded by name - gitignore has no effect on tar. Two changes: - Add excludes for .env / .env.* / .mcp.json and jks|keystore|pem|key|p12|pfx. - Follow the tar with an audit that inspects what is actually IN the archive and refuses to upload when anything credential-shaped is present. The exclude list fails OPEN (a new file added under server/ ships unless someone remembers to exclude it); the audit fails CLOSED, which is the property that matters. .env.example is deliberately shipped and is not matched. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| backup.sh | ||
| bump-version.sh | ||
| debian-13-setup.sh | ||
| finalize-release.sh | ||
| find-orphan-zone-items.js | ||
| indexnow-submit.sh | ||
| install-service.sh | ||
| migrate-multitenancy.js | ||
| mint-billing-token.js | ||
| parity-multitenancy.js | ||
| raspberry-pi-setup.sh | ||
| remotedisplay.service | ||
| reset-admin.js | ||
| upgrade.sh | ||
| windows-setup.bat | ||