Files
marathon/.gitignore
Sienna Meridian Satterwhite 25550e2165 fix(security): redact sensitive session IDs in marathonctl output
Addresses CodeQL cleartext-logging alerts (#1, #2, #3) by implementing
session ID redaction for CLI output.

Changes:
- Extract marathonctl into standalone crate (crates/marathonctl)
- Add session ID redaction showing only first 8 characters by default
- Add --show-sensitive/-s flag for full session IDs when debugging
- Implement beautiful ratatui-based UI module with inline viewport
- Add .envrc to .gitignore for secure token management
- Document GitHub token setup in CONTRIBUTING.md

The CLI now provides a secure-by-default experience while maintaining
debugging capabilities through explicit opt-in flags. Session IDs are
redacted to format "abc-def-..." unless --show-sensitive is specified.

UI module provides easy-to-use builder APIs (ui::table, ui::grid, ui::list)
that render beautiful terminal output without hijacking the terminal.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-07 19:15:10 +00:00

82 lines
987 B
Plaintext

# SQLite databases
*.db
*.db-shm
*.db-wal
*.sqlite
*.sqlite3
# Compressed files
*.zip
*.tar.gz
*.7z
*.rar
# Rust/Cargo
target/
Cargo.lock # Remove this line if this is a binary crate, keep for libraries
**/*.rs.bk
*.pdb
# macOS
.DS_Store
.AppleDouble
.LSOverride
._*
# Windows
Thumbs.db
Thumbs.db:encryptable
ehthumbs.db
Desktop.ini
# Linux
*~
.directory
# IDEs and editors
.idea/
.vscode/
*.swp
*.swo
*~
.project
.classpath
.settings/
*.sublime-project
*.sublime-workspace
# Environment and config files that may contain secrets
.env
.env.local
.env.*.local
config.toml # Remove this if you want to track config
*.local.toml
# Logs
*.log
logs/
# Temporary files
tmp/
temp/
*.tmp
# Generated documentation
docs/book/
target/doc/
# OS-specific network storage
.Trashes
.VolumeIcon.icns
.com.apple.timemachine.donotpresent
.fseventsd
.Spotlight-V100
.TemporaryItems
# Project-specific (based on your untracked files)
emotion-gradient-config-*.json
**/*.csv
.op/
.sere
.envrc