[daily secrets] Daily Secrets Analysis Report (2026-07-25) #104

Daily Secrets Analysis Report

Date: 2026-07-25
Files Scanned: All tracked files in resq-software/docs
Run: [GitHub Actions Run #30149834310]

Executive Summary

• Critical Findings: 0 (no hardcoded secrets or committed .env files found)
• Warnings: 0 (no insecure patterns detected)
• Passing Checks: 6

Critical Findings

No hardcoded secrets, private keys, or committed .env files were detected in the repository. No high-entropy or known secret patterns found in source, config, or workflow files.

Blockchain / IPFS Security

• Neo N3 Mock Mode: Not detected (no .env or dev config found)
• Solana Mock Mode: Not detected (no .env or dev config found)
• IPFS Credentials: Not detected
• Key files committed: No key files found

.gitignore Coverage

Note: .env patterns are properly gitignored. Key file patterns (*.pem, *.key, id_rsa, *.p12) are not present in .gitignore and should be added for defense-in-depth.

Workflow Secret Usage

• Total secret references: 60+ (across all workflows)
• Unique secrets:
  • secrets.DOCS_REPO_PR_TOKEN
  • secrets.GITHUB_TOKEN
  • secrets.COPILOT_GITHUB_TOKEN
  • secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN
  • secrets.GH_AW_GITHUB_TOKEN
  • secrets.SEMGREP_APP_TOKEN

Recommendations

1. Add the following patterns to .gitignore for improved key file coverage: *.pem, *.key, id_rsa, *.p12
2. Continue to avoid committing .env or key files
3. Review workflow secret usage for least-privilege and rotation

This report was generated automatically. No secrets or sensitive values are included. For questions, contact the security team.

Generated by Daily Secrets Analysis · 16.7 AIC · ⌖ 2.58 AIC · ⊞ 18.6K · ◷

• expires on Jul 28, 2026, 7:49 AM UTC