feat/leak-guard #23

Merged

clawdie merged 2 commits from feat/leak-guard into main 2026-06-29 12:55:14 +02:00

Conversation 0 Commits 2 Files changed 5 +219

clawdie commented 2026-06-29 12:54:42 +02:00

Owner

Copy link

No description provided.

clawdie added 2 commits 2026-06-29 12:54:46 +02:00

test: leak guard probe 6debd19bd3

feat: add leak-guard — pre-commit hook + CI gate for real IP/domain detection ... c3fa8c0925

Blocks commits and PRs containing:
- Real Tailscale 100.x.y.z IPs (not 100.x.x.x placeholders)
- Real MagicDNS names (*.taileXXXX.ts.net without angle brackets)
- Known public IPs (configurable via scripts/leak-patterns.conf)

Placeholders that pass: 100.x.x.x, <tailnet-name>.ts.net, <osa-public-ip>

Pre-commit hook: .githooks/pre-commit → install with ln -s
CI gate: .forgejo/workflows/leak-guard.yml → runs-on: freebsd

Emergency bypass: LEak_GUARD_SKIP=1 git commit

clawdie merged commit 1c8eef06a1 into main 2026-06-29 12:55:14 +02:00

clawdie referenced this pull request from a commit 2026-06-29 12:55:14 +02:00

Merge pull request 'feat/leak-guard' (#23) from feat/leak-guard into main

clawdie deleted branch feat/leak-guard 2026-06-29 12:55:17 +02:00

clawdie referenced this pull request 2026-06-29 16:48:16 +02:00

fix(leak-guard): config-pattern (public IP) check now blocks + self-test #24

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

clawdie/layered-soul!23

No description provided.