git-hardening

florian/git-hardening

Public Access

Fork 0

Commit Graph

Author	SHA1	Message	Date
Flo	fb69304a9b	fix: container interactive tests fail on empty GIT_CONFIG_GLOBAL Only export GIT_CONFIG_GLOBAL in tmux sessions when already set. An empty value tells git "no global config" vs unset (uses ~/.gitconfig). Also fix stat format detection in SSH permissions test. Co-Authored-By: Claude <noreply@anthropic.com>	2026-03-31 18:37:15 +02:00
Flo	8037cb7908	feat: v0.2.0 expanded hardening Add gitleaks pre-commit hook, global gitignore, plaintext credential detection, SSH key hygiene audit, 8 new git config settings, and safe.directory wildcard detection. Fix ssh-keygen macOS compatibility, FIDO2 detection via ioreg, and interactive test isolation. Implements docs/specs/2026-03-31-v0.2.0-expanded-hardening.md Co-Authored-By: Claude <noreply@anthropic.com>	2026-03-31 14:03:29 +02:00
Flo	f1b9d0183d	feat: add e2e container test harness Implements spec docs/specs/2026-03-30-e2e-container-tests.md: - 5 Containerfiles (ubuntu, debian, fedora, alpine, arch) - test/e2e.sh runner with --runtime, --rebuild, single-distro mode - tmux-based interactive tests (full accept, safety gate decline, signing generate, signing skip) - All scripts pass shellcheck Closes: #18, #19, #20 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2026-03-31 11:30:40 +02:00

Author

SHA1

Message

Date

Flo

fb69304a9b

fix: container interactive tests fail on empty GIT_CONFIG_GLOBAL

Only export GIT_CONFIG_GLOBAL in tmux sessions when already set.
An empty value tells git "no global config" vs unset (uses ~/.gitconfig).
Also fix stat format detection in SSH permissions test.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-03-31 18:37:15 +02:00

Flo

8037cb7908

feat: v0.2.0 expanded hardening

Add gitleaks pre-commit hook, global gitignore, plaintext credential
detection, SSH key hygiene audit, 8 new git config settings, and
safe.directory wildcard detection. Fix ssh-keygen macOS compatibility,
FIDO2 detection via ioreg, and interactive test isolation.

Implements docs/specs/2026-03-31-v0.2.0-expanded-hardening.md

Co-Authored-By: Claude <noreply@anthropic.com>

2026-03-31 14:03:29 +02:00

Flo

f1b9d0183d

feat: add e2e container test harness

Implements spec docs/specs/2026-03-30-e2e-container-tests.md:
- 5 Containerfiles (ubuntu, debian, fedora, alpine, arch)
- test/e2e.sh runner with --runtime, --rebuild, single-distro mode
- tmux-based interactive tests (full accept, safety gate decline,
  signing generate, signing skip)
- All scripts pass shellcheck

Closes: #18, #19, #20

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

2026-03-31 11:30:40 +02:00

3 Commits