security: secret-scanning hook + default-on wallet spending limit#571

Merged

biwasxyz merged 8 commits into

mainfrom

security/secret-scanning

Jun 12, 2026

Commits on Jun 11, 2026

security: add secret-scanning pre-commit hook + CI backstop
biwasxyz
committed
docs: wallet-safety + key-leak recovery section in SECURITY.md
biwasxyz
committed
fix(ci): run gitleaks binary directly (action wrapper needs paid org license)
biwasxyz
committed
fix(ci): precise anchored secret rules + allowlist test vectors/addresses
biwasxyz
committed
feat(security): default-on cumulative wallet spending limit
biwasxyz
committed
chore(ci): keep secret-scan workflow disabled (.yml.disabled) for future use
biwasxyz
committed
fix(security): address PR review — scoped (?i), WIF rule, hooksPath guard, CI hardening
biwasxyz
committed
docs: document spending limit + secret-scanning across README, CLAUDE.md, TOOLS.md
biwasxyz
committed