From b334c8b9df192ceb3845dd12215d912b295d1055 Mon Sep 17 00:00:00 2001 From: Kishore Kumar Date: Thu, 26 Mar 2026 22:08:18 +0530 Subject: [PATCH 1/2] feat: per-repo git author via conditional includes MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - usezombie/* and indykish/* repos → nkishore@megam.io - All other repos → kishore.kumar@e2enetworks.com (default) - Supports both SSH and HTTPS remote URLs Co-Authored-By: Claude Opus 4.6 (1M context) --- .gitconfig | 31 +++++++++++++++++++------------ .gitconfig-usezombie | 2 ++ 2 files changed, 21 insertions(+), 12 deletions(-) create mode 100644 .gitconfig-usezombie diff --git a/.gitconfig b/.gitconfig index f670fa5..46dd3f2 100644 --- a/.gitconfig +++ b/.gitconfig @@ -1,13 +1,20 @@ +# This is Git's per-user configuration file. [user] - name = Kishorekumar Neelamegam - email = nkishore@megam.io -[core] - excludesfile = /home/kishore.gitignore_global -[push] - default = simple -[http] - postBuffer = 524288000 -[color] - ui = true -[url "git://git.debian.org/d-i/"] - insteadOf = git+ssh://git.debian.org/git/d-i/ + name = Kishore Kumar + email = kishore.kumar@e2enetworks.com + +[alias] + mr = !sh -c 'git fetch $1 merge-requests/$2/head:mr-$1-$2 && git checkout mr-$1-$2' - + +# Override author email for usezombie and personal repos +[includeIf "hasconfig:remote.*.url:git@github.com:usezombie/**"] + path = ~/.gitconfig-usezombie + +[includeIf "hasconfig:remote.*.url:git@github.com:indykish/**"] + path = ~/.gitconfig-usezombie + +[includeIf "hasconfig:remote.*.url:https://github.com/usezombie/**"] + path = ~/.gitconfig-usezombie + +[includeIf "hasconfig:remote.*.url:https://github.com/indykish/**"] + path = ~/.gitconfig-usezombie diff --git a/.gitconfig-usezombie b/.gitconfig-usezombie new file mode 100644 index 0000000..65fa806 --- /dev/null +++ b/.gitconfig-usezombie @@ -0,0 +1,2 @@ +[user] + email = nkishore@megam.io From cf34b2eeb48b5d453f56d5725660272287a54986 Mon Sep 17 00:00:00 2001 From: Kishore Kumar Date: Fri, 27 Mar 2026 13:20:25 +0530 Subject: [PATCH 2/2] =?UTF-8?q?docs(agents):=20add=20credential=20safety?= =?UTF-8?q?=20guardrail=20=E2=80=94=20never=20print=20secrets=20in=20conve?= =?UTF-8?q?rsation?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit New hard safety rule: agents must never resolve or print credential values. Check effects (health endpoints, connectivity), not raw secrets. Use op:// references and vault item names only. Co-Authored-By: Claude Opus 4.6 (1M context) --- AGENTS.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/AGENTS.md b/AGENTS.md index cb2a5f4..60a84eb 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -423,6 +423,8 @@ Exit criteria: - No branch mutation outside lifecycle transitions. - No cross-worktree edits. - No secrets in commits/docs. +- Never resolve or print credential values in conversation, code, docs, playbooks, or evidence files. This includes values seen in CI logs, error messages, or debug output — once seen, do not copy them anywhere. Check effects (health endpoints, connectivity status), not raw secrets. Use `op://` references and vault item names only. +- When writing verification steps that reference credentials, always use `op read 'op://...'` at runtime. Never paste a literal value, even as an "example" or "old value to test against." - Prefer CLI and text artifacts. Do not require GUI-only tooling when a CLI path exists. ## Cognitive Discipline