rootiest
bceff8f4ec
conf.d/sponge_privacy.fish registers patterns and filters that prevent credentials from reaching fish history: Layer 1 (static regex, universal): auth flags, env assignments, credential-bearing URLs, Authorization headers, sshpass, docker login, openssl -passin/-passout Layer 2 (dynamic values, session globals): on the first prompt, after secrets.fish has loaded, reads the literal values of all exported credential-named vars (TOKEN, PASSWORD, SECRET, etc.), escapes them for regex, and merges them with the static patterns as a session global — auto-refreshes on login so rotated tokens are never stale Layer 3 (per-command filter, sponge_filter_secrets): catches credentials in variables exported mid-session (e.g. project .env) Also exempts functions/sponge_filter_secrets.fish from the sponge_* gitignore glob so our custom filter is committed alongside the config.
105 lines
3.4 KiB
Plaintext
105 lines
3.4 KiB
Plaintext
# GitIgnore for Fish-config
|
|
|
|
# id: gitig-boilerplate-7f0528027e23f210196ae4583c408e5b
|
|
# ╭──────────────────────────────────────────────────────────╮
|
|
# │ GitIgnore Boilerplate Template │
|
|
# ╰──────────────────────────────────────────────────────────╯
|
|
#
|
|
# ──────────────────── OS-Generated Files ────────────────────
|
|
# automatic backup files created by some editors (e.g., Vim, Emacs)
|
|
*~
|
|
|
|
# temporary files created if a process still has a handle to a deleted file
|
|
.fuse_hidden*
|
|
|
|
# KDE directory preferences
|
|
.directory
|
|
|
|
# MacOS junk
|
|
.DS_Store
|
|
|
|
# Linux trash folder which might appear on any partition or disk
|
|
.Trash-*
|
|
|
|
# files created when an open file is removed but is still being accessed
|
|
.nfs*
|
|
|
|
# ─────────────────── Debug/Temporary/Testing ────────────────
|
|
# Matches OLD / .OLD
|
|
[Oo][Ll][Dd]/
|
|
.[Oo][Ll][Dd]/
|
|
|
|
# Matches DISABLE / .DISABLE
|
|
[Dd][Ii][Ss][Aa][Bb][Ll][Ee]/
|
|
.[Dd][Ii][Ss][Aa][Bb][Ll][Ee]/
|
|
|
|
# Matches DISABLED / .DISABLED
|
|
[Dd][Ii][Ss][Aa][Bb][Ll][Ee][Dd]/
|
|
.[Dd][Ii][Ss][Aa][Bb][Ll][Ee][Dd]/
|
|
|
|
# Matches DEBUG / .DEBUG
|
|
[Dd][Ee][Bb][Uu][Gg]/
|
|
.[Dd][Ee][Bb][Uu][Gg]/
|
|
|
|
# Matches TMP / .TMP
|
|
[Tt][Mm][Pp]/
|
|
.[Tt][Mm][Pp]/
|
|
|
|
# Matches TEMP / .TEMP
|
|
[Tt][Ee][Mm][Pp]/
|
|
.[Tt][Ee][Mm][Pp]/
|
|
|
|
# Matches TEMPORARY / .TEMPORARY
|
|
[Tt][Ee][Mm][Pp][Oo][Rr][Aa][Rr][Yy]/
|
|
.[Tt][Ee][Mm][Pp][Oo][Rr][Aa][Rr][Yy]/
|
|
|
|
# Matches TESTING / .TESTING
|
|
[Tt][Ee][Ss][Tt][Ii][Nn][Gg]/
|
|
.[Tt][Ee][Ss][Tt][Ii][Nn][Gg]/
|
|
|
|
# ──────────────────── Planning Artifacts ───────────────────
|
|
# Catalog files generated by pre-implementation analysis passes
|
|
opinionated_catalog.md
|
|
docs/superpowers
|
|
|
|
# ──────────────── Fisher-Managed Plugin Files ───────────────
|
|
# Fisher writes these into the repo directory on install/update.
|
|
# They are owned by Fisher — do not commit them.
|
|
functions/fisher.fish
|
|
completions/fisher.fish
|
|
conf.d/sponge.fish
|
|
functions/_sponge*.fish
|
|
functions/sponge_*.fish
|
|
!functions/sponge_filter_secrets.fish
|
|
|
|
# ─────────────────── AI Sessions and Rules ──────────────────
|
|
# Matches CLAUDE.md, .claud*, etc.
|
|
[Cc][Ll][Aa][Uu][Dd][Ee].[Mm][Dd]
|
|
.[Cc][Ll][Aa][Uu][Dd]*
|
|
|
|
# Matches GEMINI.md, .gemin*, etc.
|
|
[Gg][Ee][Mm][Ii][Nn][Ii].[Mm][Dd]
|
|
.[Gg][Ee][Mm][Ii][Nn]*
|
|
|
|
# Matches ANTIGRAVITY.md, .antigrav*, etc.
|
|
[Aa][nN][Tt][Ii][Gg][Rr][Aa][Vv][Ii][Tt][Yy].[Mm][Dd]
|
|
.[Aa][Nn][Tt][Ii][Gg][Rr][Aa][Vv]*
|
|
|
|
# Matches AGENTS.md, .remember, etc.
|
|
[Aa][Gg][Ee][Nn][Tt][Ss].[Mm][Dd]
|
|
.[Rr][Ee][Mm][Ee][Mm][Bb][Ee][Rr]
|
|
|
|
# ──────────────────────────────────────────────────────────────
|
|
|
|
# id: gi-patterns-a62e4f6489ac26edaabdfc550334800a
|
|
# Created by https://www.toptal.com/developers/gitignore/api/fish
|
|
# Edit at https://www.toptal.com/developers/gitignore?templates=fish
|
|
|
|
### Fish ###
|
|
fishd.*
|
|
fish_history
|
|
fish_variables
|
|
config.local.fish
|
|
|
|
# End of https://www.toptal.com/developers/gitignore/api/fish
|