nordabiz/.auto-claude-security.json
Maciej Pienczyn e806746141 auto-claude: 5.3 - Verify no credentials remain in codebase
- Created CREDENTIAL_VERIFICATION_REPORT.md with comprehensive grep audit
- Verified NO hardcoded production passwords in executable code (.py, .sh)
- Only safe occurrences found: password redaction in logging, env var refs, docs
- Updated implementation_plan.json: subtask 5.3 status -> completed
- Updated build-progress.txt: Phase 5 and entire task COMPLETE
- CWE-798 vulnerability successfully remediated
- All 5 phases completed: Analysis, Python updates, Shell updates, Documentation, Testing
2026-01-10 13:16:10 +01:00

209 lines
3.0 KiB
JSON

{
"base_commands": [
".",
"[",
"[[",
"ag",
"awk",
"basename",
"bash",
"bc",
"break",
"cat",
"cd",
"chmod",
"clear",
"cmp",
"column",
"comm",
"command",
"continue",
"cp",
"curl",
"cut",
"date",
"df",
"diff",
"dig",
"dirname",
"du",
"echo",
"egrep",
"env",
"eval",
"exec",
"exit",
"expand",
"export",
"expr",
"false",
"fd",
"fgrep",
"file",
"find",
"fmt",
"fold",
"gawk",
"gh",
"git",
"grep",
"gunzip",
"gzip",
"head",
"help",
"host",
"iconv",
"id",
"jobs",
"join",
"jq",
"kill",
"killall",
"less",
"let",
"ln",
"ls",
"lsof",
"man",
"mkdir",
"mktemp",
"more",
"mv",
"nl",
"paste",
"pgrep",
"ping",
"pkill",
"popd",
"printenv",
"printf",
"ps",
"pushd",
"pwd",
"read",
"readlink",
"realpath",
"reset",
"return",
"rev",
"rg",
"rm",
"rmdir",
"sed",
"seq",
"set",
"sh",
"shuf",
"sleep",
"sort",
"source",
"split",
"stat",
"tail",
"tar",
"tee",
"test",
"time",
"timeout",
"touch",
"tr",
"tree",
"true",
"type",
"uname",
"unexpand",
"uniq",
"unset",
"unzip",
"watch",
"wc",
"wget",
"whereis",
"which",
"whoami",
"xargs",
"yes",
"yq",
"zip",
"zsh"
],
"stack_commands": [
"createdb",
"createuser",
"dive",
"docker",
"docker-buildx",
"docker-compose",
"dockerfile",
"dropdb",
"dropuser",
"flask",
"gevent",
"gunicorn",
"initdb",
"ipython",
"jupyter",
"node",
"notebook",
"npm",
"npx",
"pdb",
"pg_ctl",
"pg_dump",
"pg_dumpall",
"pg_isready",
"pg_restore",
"pip",
"pip3",
"pipx",
"postgres",
"psql",
"pudb",
"python",
"python3",
"sqlite",
"sqlite3",
"waitress"
],
"script_commands": [
"./deploy.sh",
"./view_maturity_results.sh"
],
"custom_commands": [],
"detected_stack": {
"languages": [
"python",
"javascript"
],
"package_managers": [
"pip"
],
"frameworks": [
"flask",
"sqlalchemy"
],
"databases": [
"postgresql",
"sqlite"
],
"infrastructure": [
"docker"
],
"cloud_providers": [],
"code_quality_tools": [],
"version_managers": []
},
"custom_scripts": {
"npm_scripts": [],
"make_targets": [],
"poetry_scripts": [],
"cargo_aliases": [],
"shell_scripts": [
"view_maturity_results.sh",
"deploy.sh"
]
},
"project_dir": "/Users/maciejpi/claude/projects/active/nordabiz/.auto-claude/worktrees/tasks/004-remove-hardcoded-database-credentials-from-shell-s",
"created_at": "2026-01-10T12:44:08.427552",
"project_hash": "2072434108cbf575c197df5396450b70"
}