Delegate stored-login inference policy to the hosted service by morgaesis · Pull Request #191 · postil-dev/postil-cli

2 error, 0 warn, 0 info

2 blocking findings open

2 suppressed

Remove and rotate the committed access token at tests/e2e.rs:1402: restates a retained finding about another location; severity error, confidence 0.99. This access token is committed to the repository, so it must be treated as exposed regardless of whether it is a fixture value. Rotate the credential, purge it from git history (the commit is permanent otherwise), and move it to an environment variable or secrets store.
Remove the committed credential-like token at tests/e2e.rs:1451: restates a retained finding about another location; severity error, confidence 0.99. This token is committed in the repository, so treat it as exposed even if it is intended only for tests. Rotate the credential, purge it from git history because the commit is permanent otherwise, and move the value to an environment variable or secrets store.