Security Dashboard

Search the build

9 commits indexed

1. 4538c85 2026-09-15 security: add rel=noopener noreferrer to target=_blank links (yoloforever cycle 3)
2. 3807fb1 2026-07-03 chore: macstudio3 migration — reconcile from mac2 + repoint paths (stevestudio2→macstudio3, node/npm/npx→/opt/homebrew)
3. 30cc8fb 2026-06-03 gitignore: add missing standard excludes (dist/ build/ .next/)
4. 3b1fd39 2026-05-31 prod-ready: env PORT + PROBE_LOCAL on-box probe mode, /api/health, relative api/status fetch (subpath-safe), ecosystem.config.cjs (:9769), .deploy.conf
5. cf95d58 2026-05-31 dashboard: mark 3 leaks env-ified (code closed; still rotate), mfr held on SECURITY-HOLD; rotate-vs-envify status pills
6. c5b2a58 2026-05-31 auto-surface live tokens also hardcoded in code to top of rotation list (Shopify 75b9)
7. 8a8144e 2026-05-31 add fleet hardcoded-cred + malware card; Kamatera malware verified clean 2026-05-31
8. b43759b 2026-05-31 add fleet-sweep hardcoded-credential leaks card (4 creds + dear-bubbe malware) with vscode open-at-line + provider regen links
9. fae9bdb 2026-05-31 security posture single-page live viewer on :9768

Authors

• Steve6
• steve3

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UxvvaJ7p6VRZ4RzKDaBXqK

File tree

6 files tracked. Click any to browse the source at HEAD.

• .deploy.conf
• .gitignore
• data/code-leaks.json
• ecosystem.config.cjs
• public/index.html
• server.js

Other build journals

← Secrets Manager  ·  all 4 projects  ·  Selfadhesivewallpaper →

Export

commits.csv · feed.atom · project.json · commits.json