Skip to content

Name the Key Vault source of truth for the org Actions secrets (Monitoring#954) - #65

Merged
cshuttle merged 1 commit into
mainfrom
bws-954-prose-sweep
Aug 28, 2026
Merged

Name the Key Vault source of truth for the org Actions secrets (Monitoring#954)#65
cshuttle merged 1 commit into
mainfrom
bws-954-prose-sweep

Conversation

@cshuttle

Copy link
Copy Markdown
Owner

Part of the bws → Azure Key Vault prose sweep (cshuttle/Monitoring#954). Comments, secrets.*.description strings and README prose only — no workflow logic changes.

  • .github/workflows/komodo-deploy.yml:27,76komodo-github-webhook-secret.
  • .github/workflows/ggshield-scan.yml:45 and README.md:85gitguardian-api-key.
  • README.md:113komodo-github-webhook-secret.
  • Left alone: the two notes that bws-era UUID hits are resolved as false positives in the GitGuardian dashboard (README.md:69, ggshield-scan.yml:7) — still the policy for anything in git history.

🤖 Generated with Claude Code

https://claude.ai/code/session_01WGnPjPXhauHVWDFZBzoGRC

…oring#954)

The reusable workflows' secret descriptions and the README still said the
Komodo webhook HMAC and the GitGuardian API key were sourced from bws. They
are Key Vault secrets now (komodo-github-webhook-secret, gitguardian-api-key).
Comments and descriptions only; no workflow logic changes.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WGnPjPXhauHVWDFZBzoGRC
@cshuttle
cshuttle merged commit d342d40 into main Aug 28, 2026
11 checks passed
@cshuttle
cshuttle deleted the bws-954-prose-sweep branch August 30, 2026 13:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant