[daily secrets] Daily Secrets Analysis Report — 2026-08-23

[github-actions[bot]]

Daily Secrets Analysis Report

Date: 2026-08-23
Files Scanned: All source, infra, and workflow files (full monorepo)
Run: [CI Run #32662301785]

Executive Summary

• Critical Findings: 1 (incomplete .gitignore coverage for secret files)
• Warnings: 2 (potential for committed .env files, missing .env patterns in .gitignore)
• Passing Checks: 5

Critical Findings

• Several secret file patterns are not present in .gitignore:
  • .env.local, .env.production, *.pem, *.key, id_rsa, *.p12 (⚠️)
  • This increases risk of accidental secret commits. Immediate action required.
• No committed .env files detected in the repo (✅)

Blockchain / IPFS Security

• Neo N3 Mock Mode: No explicit NEO_MOCK_MODE found in configs (⚠️)
• Solana Mock Mode: No explicit SOLANA_MOCK_MODE found in configs (⚠️)
• IPFS Credentials: No hardcoded IPFS keys detected (✅)
• Key files committed: No .pem, .key, or similar files found (✅)

.gitignore Coverage

Pattern	Status
.env	✅
.env.local	⚠️
.env.production	⚠️
*.pem	⚠️
*.key	⚠️
id_rsa	⚠️
*.p12	⚠️

Workflow Secret Usage

• Total secret references: 109 (across all workflows)
• Unique secrets:
  • CHROMATIC_PROJECT_TOKEN
  • COPILOT_GITHUB_TOKEN
  • DOCS_REPO_PR_TOKEN
  • GEMINI_API_KEY
  • GH_AW_GITHUB_MCP_SERVER_TOKEN
  • GH_AW_GITHUB_TOKEN
  • GITHUB_TOKEN
  • NPM_TOKEN

Recommendations

1. Add all secret file patterns to .gitignore: .env.local, .env.production, *.pem, *.key, id_rsa, *.p12
2. Ensure mock mode is explicitly enabled for Neo N3 and Solana in all dev/test configs
3. Review workflow secrets for necessity and scope
4. Continue daily scans to ensure no secrets are committed

---

No actual secret values are shown. For questions, see AGENTS.md or contact security@resq.systems.

Generated by Daily Secrets Analysis · 16.7 AIC · ⌖ 6.7 AIC · ⊞ 19.9K · ◷

• expires on Aug 26, 2026, 7:50 PM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-08-26T19:50:36.911Z.

Closed by Workflow