• Joined on 2026-02-03
cal created branch bugfix/limit-caps in cal/major-domo-database 2026-04-01 22:23:35 +00:00
cal pushed to bugfix/limit-caps at cal/major-domo-database 2026-04-01 22:23:35 +00:00
16f3f8d8de Fix unbounded API queries causing Gunicorn worker timeouts
cal opened issue cal/major-domo-database#98 2026-04-01 21:46:04 +00:00
API allows unbounded queries causing Gunicorn worker timeouts
cal commented on issue cal/paper-dynasty-database#9 2026-04-01 21:11:21 +00:00
Rotate credentials committed in .env

Follow-up: Dev PostgreSQL password for sba_admin was also rotated on 2026-04-01. The old placeholder value your_production_password has been replaced with a secure generated password. Dev API…

cal closed issue cal/paper-dynasty-database#9 2026-04-01 18:03:39 +00:00
Rotate credentials committed in .env
cal commented on issue cal/paper-dynasty-card-creation#50 2026-04-01 18:03:29 +00:00
Rotate secrets exposed in git history

Resolved via PR #52

  • Real API token (Tp3aO3jhYve5NJF1IqOmJTmk) scrubbed from docs/PD_CARDS_CLI_REFERENCE.md — replaced with your-api-token-here placeholder
  • Full audit of tracked…
cal commented on issue cal/paper-dynasty-database#9 2026-04-01 18:03:26 +00:00
Rotate credentials committed in .env

Credential Rotation — Closed

All remediation tasks for this issue are complete as of 2026-04-01.

Rotation Actions

  • API_TOKEN — rotated on prod (ssh akamai) and dev (`ssh…
cal deleted branch fix/docker-compose-secrets-untrack from cal/paper-dynasty-discord 2026-04-01 18:02:38 +00:00
cal pushed to main at cal/paper-dynasty-discord 2026-04-01 18:02:37 +00:00
b65d91a65b Merge pull request 'fix: remove docker-compose.yml from tracking, add example template' (#136) from fix/docker-compose-secrets-untrack into main
4bda3bf0de Merge branch 'main' into fix/docker-compose-secrets-untrack
fb545ef34a fix: remove docker-compose.yml from tracking, add example template
Compare 3 commits »
cal merged pull request cal/paper-dynasty-discord#136 2026-04-01 18:02:36 +00:00
fix: remove docker-compose.yml from tracking, add example template
cal pushed to fix/docker-compose-secrets-untrack at cal/paper-dynasty-discord 2026-04-01 18:02:32 +00:00
4bda3bf0de Merge branch 'main' into fix/docker-compose-secrets-untrack
ff768c95f5 Merge pull request 'chore: add .env.example with placeholder values' (#135) from chore/add-env-example into main
f704b09933 chore: add .env.example with placeholder values
94f3b1dc97 fix: apply open-packs hotfix to cogs/economy.py
Compare 4 commits »
cal deleted branch chore/add-env-example from cal/paper-dynasty-discord 2026-04-01 18:02:19 +00:00
cal pushed to main at cal/paper-dynasty-discord 2026-04-01 18:02:19 +00:00
ff768c95f5 Merge pull request 'chore: add .env.example with placeholder values' (#135) from chore/add-env-example into main
f704b09933 chore: add .env.example with placeholder values
94f3b1dc97 fix: apply open-packs hotfix to cogs/economy.py
Compare 3 commits »
cal merged pull request cal/paper-dynasty-discord#135 2026-04-01 18:02:18 +00:00
chore: add .env.example with placeholder values
cal deleted branch fix/scrub-exposed-credentials from cal/paper-dynasty-card-creation 2026-04-01 18:02:04 +00:00
cal pushed to main at cal/paper-dynasty-card-creation 2026-04-01 18:02:04 +00:00
c1f06eb9c7 Merge pull request 'fix: scrub exposed credentials from docs' (#52) from fix/scrub-exposed-credentials into main
d6b65594b8 Merge branch 'main' into fix/scrub-exposed-credentials
94fd72344d fix: scrub exposed API token from docs
43aff3568f fix: increase API timeouts to prevent bulk query failures
6f67cfec9a docs: address PR #51 review — rarity naming, OPS threshold, truncation invariant
Compare 6 commits »
cal merged pull request cal/paper-dynasty-card-creation#52 2026-04-01 18:02:02 +00:00
fix: scrub exposed credentials from docs
cal closed issue cal/paper-dynasty-card-creation#50 2026-04-01 18:02:02 +00:00
Rotate secrets exposed in git history
cal pushed to fix/scrub-exposed-credentials at cal/paper-dynasty-card-creation 2026-04-01 18:01:59 +00:00
d6b65594b8 Merge branch 'main' into fix/scrub-exposed-credentials
eaf4bdbd6c docs: refractor Phase 2 design validation spec (#51)
Compare 2 commits »
cal commented on pull request cal/paper-dynasty-discord#136 2026-04-01 18:01:30 +00:00
fix: remove docker-compose.yml from tracking, add example template

Security Review — APPROVED (no real secrets found)