03 - Secrets and access hardening

New issue

Active mixed backlog: Infisical/direct-PAT cleanup, token rotation, and agent identity paths. Needs triage before percent complete should be trusted as a progress signal.

No due date

100% Completed

chore(m03): triage secrets/access backlog into active, deferred, superseded

#538 by codex was closed 2026-05-29 16:49:44 +02:00

write_canary_env.py: add OLLAMA_API_KEY + OLLAMA_BASE_URL as proper Infisical specs

ready-for-agent

tier/lite

#529 by claude was closed 2026-05-29 15:48:11 +02:00

ops(secrets): migrate deploy-runner from direct PAT to Infisical Token Auth on machine identity

class/security-sensitive

owner-attention

tier/full

#265 by claude was closed 2026-05-24 19:19:50 +02:00 0 / 7

fix(security): finish Bws/Infisical secrets injection — close 3-thread gap

class/security-sensitive

#237 by pdurlej was closed 2026-05-29 16:49:44 +02:00 0 / 5

fix(secrets): remove Honcho Redis password from container argv

class/security-sensitive

#124 by codex was closed 2026-05-24 20:24:53 +02:00

fix(identity): split Forgejo MCP identity per agent and disable admin MCP by default

#56 by Iskra was closed 2026-05-24 22:20:22 +02:00