From 218a1ccbdd9162694f88da2f41c64c6e35c04626 Mon Sep 17 00:00:00 2001 From: bakerboy448 <55419169+bakerboy448@users.noreply.github.com> Date: Sun, 1 Mar 2026 16:27:41 -0600 Subject: [PATCH 1/2] chore: add CodeRabbit config --- .coderabbit.yaml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .coderabbit.yaml diff --git a/.coderabbit.yaml b/.coderabbit.yaml new file mode 100644 index 0000000..18c89a2 --- /dev/null +++ b/.coderabbit.yaml @@ -0,0 +1,22 @@ +language: en-US +reviews: + profile: assertive + request_changes_workflow: true + high_level_summary: true + poem: false + review_status: true + collapse_walkthrough: false + path_instructions: + - path: "*.py" + instructions: | + Review for security issues — validate all user inputs. + Check for proper error handling and logging. + - path: ".github/workflows/**" + instructions: | + Check for command injection via untrusted GitHub context variables. + Verify secrets are not exposed in logs. + - path: "Dockerfile" + instructions: | + Check for security best practices — non-root user, minimal base image. +chat: + auto_reply: true From 1271ecc05d9060a3c0e6c72a026b4c77b0357393 Mon Sep 17 00:00:00 2001 From: bakerboy448 <55419169+bakerboy448@users.noreply.github.com> Date: Sun, 1 Mar 2026 16:27:42 -0600 Subject: [PATCH 2/2] chore: add gitleaks config --- .gitleaks.toml | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 .gitleaks.toml diff --git a/.gitleaks.toml b/.gitleaks.toml new file mode 100644 index 0000000..68f7f2f --- /dev/null +++ b/.gitleaks.toml @@ -0,0 +1,12 @@ +# Gitleaks configuration +# https://github.com/gitleaks/gitleaks + +title = "RedditModLog gitleaks config" + +[allowlist] + description = "Global allowlist" + paths = [ + '''\.env\.example''', + '''__pycache__/''', + '''\.pytest_cache/''', + ]