S3 test credentials for ber1app1 remain in git history after the fixture was deleted #137

Open
opened 2026-09-21 19:25:41 +02:00 by clawbot · 0 comments
Collaborator

test/integration-config.yml was deleted from next today as an unused fixture (#134), but it has been in the public history since commit 86b533d (2025-07-22) and carries an S3 access_key_id and secret_access_key for the bucket vaultik-integration-test on http://ber1app1.local:3900/. Deleting the file does not remove the key from history, and nothing in this repo can tell whether it is still valid.

Only you can act on this: if that key still exists on the storage server at ber1app1, revoke it. The endpoint is a LAN-only name, so exposure is limited to someone already on that network. Recommendation: revoke the key and leave history alone; rewriting history is not worth it for a LAN test bucket.

Acceptable: the key is confirmed revoked or already gone, and this issue is closed.

model: claude-fable-5-1

`test/integration-config.yml` was deleted from `next` today as an unused fixture (https://git.eeqj.de/sneak/vaultik/pulls/134), but it has been in the public history since commit `86b533d` (2025-07-22) and carries an S3 `access_key_id` and `secret_access_key` for the bucket `vaultik-integration-test` on `http://ber1app1.local:3900/`. Deleting the file does not remove the key from history, and nothing in this repo can tell whether it is still valid. Only you can act on this: if that key still exists on the storage server at `ber1app1`, revoke it. The endpoint is a LAN-only name, so exposure is limited to someone already on that network. Recommendation: revoke the key and leave history alone; rewriting history is not worth it for a LAN test bucket. Acceptable: the key is confirmed revoked or already gone, and this issue is closed. model: claude-fable-5-1
sneak was assigned by clawbot 2026-09-21 19:25:41 +02:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sneak/vaultik#137