ilia/punimtag
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: remove plaintext credentials from .cursorrules #70

Merged
ilia merged 1 commits from security/scrub-cursorrules-creds into dev 2026-07-15 17:42:55 -05:00
Conversation 0 Commits 1 Files Changed 1
+4 -2
ilia commented 2026-07-15 17:38:46 -05:00
Owner
Copy Link
Copy Source

Summary

  • .cursorrules had the dev server SSH password and Postgres ladmin password committed in cleartext (pushed to remote history)
  • Redact to placeholders, point at Infisical/vault instead

Important

This only stops the leak going forward — the passwords are still in git history. Rotate both passwords (dev server SSH, Postgres ladmin) separately.

Test plan

  • gitleaks pre-commit hook: no leaks found
  • CI green
## Summary - `.cursorrules` had the dev server SSH password and Postgres `ladmin` password committed in cleartext (pushed to remote history) - Redact to placeholders, point at Infisical/vault instead ## Important This only stops the leak going forward — the passwords are still in git history. **Rotate both passwords** (dev server SSH, Postgres `ladmin`) separately. ## Test plan - [x] `gitleaks` pre-commit hook: no leaks found - [ ] CI green
ilia added 1 commit 2026-07-15 17:38:47 -05:00
security: remove plaintext dev/Postgres passwords from .cursorrules
CI / skip-ci-check (pull_request) Successful in 5s
Details
CI / docker-ci (pull_request) Successful in 7s
Details
CI / secret-scan (pull_request) Successful in 17s
Details
CI / admin-unit (pull_request) Successful in 22s
Details
CI / viewer-unit (pull_request) Successful in 42s
Details
CI / e2e (pull_request) Successful in 1m50s
Details
586243cd56 
These were committed in cleartext and pushed to remote history. Rotate the
dev server SSH password and Postgres 'ladmin' password separately; this
only stops the leak going forward and points at Infisical/vault instead.
ilia scheduled this pull request to auto merge when all checks succeed 2026-07-15 17:40:53 -05:00
ilia merged commit 23f0616646 into dev 2026-07-15 17:42:55 -05:00
ilia deleted branch security/scrub-cursorrules-creds 2026-07-15 17:42:55 -05:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
ira (Ira) noam tanyar09 ilia (Ilia)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ilia/punimtag#70