[daily secrets] Daily Secrets Analysis Report

[github-actions[bot]]

Date: 2026-08-29
Files Scanned: All tracked files in resq-software/docs
Run: [ID 33240571615]

Executive Summary

• Critical Findings: 0 (no hardcoded secrets or committed .env files found)
• Warnings: 1 (see Blockchain/IPFS section)
• Passing Checks: 6

Critical Findings

No hardcoded secrets, API keys, JWT/session secrets, or committed .env files were detected in the repository. No high-entropy or known secret patterns found in source, config, or infra files.

Blockchain / IPFS Security

• Neo N3 Mock Mode: No explicit mock mode found in configs (no .env or .env.local present; no NEO_MOCK_MODE pattern detected)
• Solana Mock Mode: No explicit mock mode found in configs (no .env or .env.local present; no SOLANA_MOCK_MODE pattern detected)
• IPFS Credentials: No IPFS API key or credential patterns found
• Key files committed: No .pem, .key, or similar files detected

.gitignore Coverage

Pattern	Status
.env	✅
.env.local	✅
.env.*.local	✅
*.pem	⚠️
*.key	⚠️
id_rsa	⚠️
*.p12	⚠️

Note: While .env patterns are covered, .pem, .key, id_rsa, and .p12 are not explicitly gitignored. Recommend adding these to .gitignore.

Workflow Secret Usage

• Total secret references: 80+ (across multiple workflow files)
• Unique secrets:
  • secrets.GITHUB_TOKEN
  • secrets.COPILOT_GITHUB_TOKEN
  • secrets.GH_AW_GITHUB_TOKEN
  • secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN
  • secrets.SEMGREP_APP_TOKEN
  • secrets.DOCS_REPO_PR_TOKEN

Recommendations

1. Add *.pem, *.key, id_rsa, and *.p12 to .gitignore to prevent accidental key commits.
2. Continue to avoid committing .env files and secrets to source.
3. Ensure mock mode is explicitly set in dev/test configs for Neo N3 and Solana.
4. Review workflow secret usage for least-privilege and rotation.

No actual secret values are included in this report. All findings are based on patterns and file paths only.

Generated by Daily Secrets Analysis · 21.7 AIC · ⌖ 2.58 AIC · ⊞ 18.6K · ◷

• expires on Sep 1, 2026, 7:23 AM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-09-01T07:23:16.218Z.

Closed by Workflow