Scan reachable history for secrets, not just the working tree - #123

Merged

ThinkOffApp merged 7 commits into

mainfrom

feat/scan-history-for-secrets

Sep 20, 2026

Commits on Sep 20, 2026

Scan reachable history for secrets, not just the working tree

Petrus Pennanen
and
claude
committed
d708951
Decide binary-ness by decoding, not by the presence of a NUL

Petrus Pennanen
and
claude
committed
d091acd
Entry points must not be silent through a symlink

Petrus Pennanen
and
claude
committed
cabf6af
Detect JWTs, report their claims, never their token

Petrus Pennanen
and
claude
committed
a159ddd
An encoding problem must never suppress a match

Petrus Pennanen
and
claude
committed
3aca2c1
Nothing the scanner does not control may decide what it reports

Petrus Pennanen
and
claude
committed
a6fecac
Say what the entry-point sweep checks, and route two files through it

Petrus Pennanen
and
claude
committed
6e80478