flan
53e2f9b012
secret-scan / gitleaks (push) Successful in 9s
Scans the full git history on push, pull request and weekly, so a credential that was committed and later removed is still detected. The scanner archive is pinned by version and verified by SHA-256 before it runs, and matched values are redacted so they never reach the CI log.
flan
holden. i keep a homelab and write small tools that mostly work. mostly python, some rust. more at arch.fyi.
projects
- hark — cross-podcast topic index. what different shows say about the same things.
- adscrub — feed proxy that transcribes podcasts locally and cuts the ads out.
- tiltmeter — political-lean ratings for news outlets, built from open code and data.
- arch-turnkey — one-command arch installs. encrypted btrfs, snapshots.
- truenas-truecloud-patch — adds backblaze b2 and s3 to truenas truecloud backup.
- jellyfin-placard — jellyfin plugin that bakes library names onto backdrops.
- winnow — picks diverse photos from immich to train frigate face recognition.
if any of this is useful to you: github sponsors · ko-fi
avatar: solanum pseudolulo fruit by IKAl, cc by-sa 3.0, via wikimedia commons.
