tanshu/playbooks
1
0 Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add secret scanning, layout checks, and a --changed mode

Browse Source 
gitleaks runs before each commit and in CI, with known values in a redacted baseline. The layout check rejects empty readmes and main.yml role entrypoints. --changed lints only the YAML files that differ from HEAD.
This commit is contained in:
tanshu committed 2026-10-18 21:53:29 +05:30
1 parent f3845bde2b
commit 2aab1aec1e
8 files changed
+478 -19
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.gitleaks-baseline.json
+282
View File
@@ -0,0 +1,282 @@
[
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 82,
"EndLine": 82,
"StartColumn": 2,
"EndColumn": 52,
"Match": "yamtrack_secret: \"REDACTED\"",
"Secret": "REDACTED",
"File": "yamtrack/vars/default.yml",
"SymlinkFile": "",
"Commit": "af2e7394b8b2882b0a1f3cf74976dc1fafd610d0",
"Entropy": 3.8042293,
"Author": "Amritanshu",
"Email": "git@tanshu.com",
"Date": "2026-10-18T16:05:53Z",
"Message": "Add the Yamtrack playbook",
"Tags": [],
"Fingerprint": "af2e7394b8b2882b0a1f3cf74976dc1fafd610d0:yamtrack/vars/default.yml:generic-api-key:82"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 86,
"EndLine": 86,
"StartColumn": 2,
"EndColumn": 40,
"Match": "auth_secret: \"REDACTED\"",
"Secret": "REDACTED",
"File": "sms-wa-bridge/vars/default.yml",
"SymlinkFile": "",
"Commit": "26a0654fea2b85cfcc1587418834f2358f384ae9",
"Entropy": 3.6572683,
"Author": "Amritanshu",
"Email": "git@tanshu.com",
"Date": "2026-10-18T16:05:53Z",
"Message": "Add the sms-wa-bridge playbook",
"Tags": [],
"Fingerprint": "26a0654fea2b85cfcc1587418834f2358f384ae9:sms-wa-bridge/vars/default.yml:generic-api-key:86"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 17,
"EndLine": 17,
"StartColumn": 2,
"EndColumn": 77,
"Match": "secret_key: REDACTED",
"Secret": "REDACTED",
"File": "outline/vars/default.yml",
"SymlinkFile": "",
"Commit": "250456e3fe1ca58fa836fe182c0519327bba898c",
"Entropy": 3.7609768,
"Author": "Amritanshu",
"Email": "git@tanshu.com",
"Date": "2026-10-18T16:05:52Z",
"Message": "Add the Outline playbook",
"Tags": [],
"Fingerprint": "250456e3fe1ca58fa836fe182c0519327bba898c:outline/vars/default.yml:generic-api-key:17"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 18,
"EndLine": 18,
"StartColumn": 2,
"EndColumn": 79,
"Match": "utils_secret: REDACTED",
"Secret": "REDACTED",
"File": "outline/vars/default.yml",
"SymlinkFile": "",
"Commit": "250456e3fe1ca58fa836fe182c0519327bba898c",
"Entropy": 3.9114883,
"Author": "Amritanshu",
"Email": "git@tanshu.com",
"Date": "2026-10-18T16:05:52Z",
"Message": "Add the Outline playbook",
"Tags": [],
"Fingerprint": "250456e3fe1ca58fa836fe182c0519327bba898c:outline/vars/default.yml:generic-api-key:18"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 9,
"EndLine": 9,
"StartColumn": 2,
"EndColumn": 75,
"Match": "password: REDACTED",
"Secret": "REDACTED",
"File": "registry/vars/default.yml",
"SymlinkFile": "",
"Commit": "f04a29b5c7050fa4404e9fc94e3489211c9dff50",
"Entropy": 3.8824525,
"Author": "Amritanshu",
"Email": "git@tanshu.com",
"Date": "2024-12-17T12:23:30Z",
"Message": "Docker registry",
"Tags": [],
"Fingerprint": "f04a29b5c7050fa4404e9fc94e3489211c9dff50:registry/vars/default.yml:generic-api-key:9"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 394,
"EndLine": 394,
"StartColumn": 8,
"EndColumn": 40,
"Match": "X-Auth: REDACTED'",
"Secret": "REDACTED",
"File": "sms-wa-bridge/readme.md",
"SymlinkFile": "",
"Commit": "26a0654fea2b85cfcc1587418834f2358f384ae9",
"Entropy": 3.6572683,
"Author": "Amritanshu",
"Email": "git@tanshu.com",
"Date": "2026-10-18T16:05:53Z",
"Message": "Add the sms-wa-bridge playbook",
"Tags": [],
"Fingerprint": "26a0654fea2b85cfcc1587418834f2358f384ae9:sms-wa-bridge/readme.md:generic-api-key:394"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 408,
"EndLine": 408,
"StartColumn": 48,
"EndColumn": 80,
"Match": "X-Auth: REDACTED`",
"Secret": "REDACTED",
"File": "sms-wa-bridge/readme.md",
"SymlinkFile": "",
"Commit": "26a0654fea2b85cfcc1587418834f2358f384ae9",
"Entropy": 3.6572683,
"Author": "Amritanshu",
"Email": "git@tanshu.com",
"Date": "2026-10-18T16:05:53Z",
"Message": "Add the sms-wa-bridge playbook",
"Tags": [],
"Fingerprint": "26a0654fea2b85cfcc1587418834f2358f384ae9:sms-wa-bridge/readme.md:generic-api-key:408"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 2,
"EndLine": 2,
"StartColumn": 2,
"EndColumn": 75,
"Match": "API_TOKEN=REDACTED",
"Secret": "REDACTED",
"File": "bifrost/app/.env",
"SymlinkFile": "",
"Commit": "02cc1dafe599f7ceeba7ad79669568aa83970ccc",
"Entropy": 3.589582,
"Author": "tanshu",
"Email": "tanshu@gmail.com",
"Date": "2020-05-04T11:34:09Z",
"Message": "Bifrost deployed using ansible",
"Tags": [],
"Fingerprint": "02cc1dafe599f7ceeba7ad79669568aa83970ccc:bifrost/app/.env:generic-api-key:2"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 13,
"EndLine": 13,
"StartColumn": 2,
"EndColumn": 76,
"Match": "SECRET_KEY=REDACTED",
"Secret": "REDACTED",
"File": "brewman/files/.env-exp",
"SymlinkFile": "",
"Commit": "ed8feff302e70deb575295a15b81b74bb89b8e6e",
"Entropy": 3.8843737,
"Author": "tanshu",
"Email": "git@tanshu.com",
"Date": "2020-10-17T06:57:59Z",
"Message": "New: Fastapi Brewman Fastapi Barker",
"Tags": [],
"Fingerprint": "ed8feff302e70deb575295a15b81b74bb89b8e6e:brewman/files/.env-exp:generic-api-key:13"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 13,
"EndLine": 13,
"StartColumn": 2,
"EndColumn": 76,
"Match": "SECRET_KEY=REDACTED",
"Secret": "REDACTED",
"File": "brewman/files/.env-acc",
"SymlinkFile": "",
"Commit": "ed8feff302e70deb575295a15b81b74bb89b8e6e",
"Entropy": 3.887898,
"Author": "tanshu",
"Email": "git@tanshu.com",
"Date": "2020-10-17T06:57:59Z",
"Message": "New: Fastapi Brewman Fastapi Barker",
"Tags": [],
"Fingerprint": "ed8feff302e70deb575295a15b81b74bb89b8e6e:brewman/files/.env-acc:generic-api-key:13"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 13,
"EndLine": 13,
"StartColumn": 2,
"EndColumn": 76,
"Match": "SECRET_KEY=REDACTED",
"Secret": "REDACTED",
"File": "brewman/files/.env-mhl",
"SymlinkFile": "",
"Commit": "ed8feff302e70deb575295a15b81b74bb89b8e6e",
"Entropy": 3.8439462,
"Author": "tanshu",
"Email": "git@tanshu.com",
"Date": "2020-10-17T06:57:59Z",
"Message": "New: Fastapi Brewman Fastapi Barker",
"Tags": [],
"Fingerprint": "ed8feff302e70deb575295a15b81b74bb89b8e6e:brewman/files/.env-mhl:generic-api-key:13"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 8,
"EndLine": 8,
"StartColumn": 2,
"EndColumn": 76,
"Match": "SECRET_KEY=REDACTED",
"Secret": "REDACTED",
"File": "barker/files/.env",
"SymlinkFile": "",
"Commit": "ed8feff302e70deb575295a15b81b74bb89b8e6e",
"Entropy": 3.8627045,
"Author": "tanshu",
"Email": "git@tanshu.com",
"Date": "2020-10-17T06:57:59Z",
"Message": "New: Fastapi Brewman Fastapi Barker",
"Tags": [],
"Fingerprint": "ed8feff302e70deb575295a15b81b74bb89b8e6e:barker/files/.env:generic-api-key:8"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 13,
"EndLine": 13,
"StartColumn": 2,
"EndColumn": 76,
"Match": "SECRET_KEY=REDACTED",
"Secret": "REDACTED",
"File": "brewman/files/.env-hops",
"SymlinkFile": "",
"Commit": "ed8feff302e70deb575295a15b81b74bb89b8e6e",
"Entropy": 3.8454638,
"Author": "tanshu",
"Email": "git@tanshu.com",
"Date": "2020-10-17T06:57:59Z",
"Message": "New: Fastapi Brewman Fastapi Barker",
"Tags": [],
"Fingerprint": "ed8feff302e70deb575295a15b81b74bb89b8e6e:brewman/files/.env-hops:generic-api-key:13"
},
{
"RuleID": "generic-api-key",
"Description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
"StartLine": 2,
"EndLine": 2,
"StartColumn": 2,
"EndColumn": 81,
"Match": "SECRET_KEY_BASE=REDACTED",
"Secret": "REDACTED",
"File": "snibox/files/.env",
"SymlinkFile": "",
"Commit": "5922227712b37dfd0e67df2a2b5334998d1f2702",
"Entropy": 3.8725784,
"Author": "tanshu",
"Email": "git@tanshu.com",
"Date": "2020-10-17T06:58:52Z",
"Message": "New: Snibox",
"Tags": [],
"Fingerprint": "5922227712b37dfd0e67df2a2b5334998d1f2702:snibox/files/.env:generic-api-key:2"
}
]