jellyfin-placard

15 Commits 1 Branch 1 Tag

3 Commits

Author	SHA1	Message	Date
flan	33ecee4849	Ignore __pycache__ secret-scan / gitleaks (push) Successful in 10s Details The repository ships Python helper scripts, so running or byte-compiling one leaves a __pycache__ directory that showed up as untracked noise.	2026-09-28 17:56:23 +00:00
flan	5dae8a5bad	Add a pinned secret-scanning workflow secret-scan / gitleaks (push) Successful in 26s Details Scans the full git history on push, pull request and weekly, so a credential that was committed and later removed is still detected. The scanner archive is pinned by version and verified by SHA-256 before it runs, and matched values are redacted so they never reach the CI log.	2026-09-28 17:23:42 +00:00
flan	fdf45691ae	Read Jellyfin server and user from the environment The helper scripts hardcoded a specific server address, account name and device identifier, which published private deployment details in a public repository. Both values are now required from JELLYFIN_URL and JELLYFIN_USER, and the scripts exit with usage text when either is unset.	2026-09-28 17:19:34 +00:00

Author

SHA1

Message

Date

flan

33ecee4849

Ignore __pycache__

secret-scan / gitleaks (push) Successful in 10s

Details

The repository ships Python helper scripts, so running or byte-compiling one
leaves a __pycache__ directory that showed up as untracked noise.

2026-09-28 17:56:23 +00:00

flan

5dae8a5bad

Add a pinned secret-scanning workflow

secret-scan / gitleaks (push) Successful in 26s

Details

Scans the full git history on push, pull request and weekly, so a credential
that was committed and later removed is still detected. The scanner archive is
pinned by version and verified by SHA-256 before it runs, and matched values
are redacted so they never reach the CI log.

2026-09-28 17:23:42 +00:00

flan

fdf45691ae

Read Jellyfin server and user from the environment

The helper scripts hardcoded a specific server address, account name and
device identifier, which published private deployment details in a public
repository. Both values are now required from JELLYFIN_URL and
JELLYFIN_USER, and the scripts exit with usage text when either is unset.

2026-09-28 17:19:34 +00:00