claude-did-this/claude-hub
1
0
Fork 1
mirror of https://github.com/claude-did-this/claude-hub.git synced 2026-02-15 03:31:47 +01:00
Code Issues Packages Projects Releases Wiki Activity
269 Commits 29 Branches 2 Tags
main
Commit Graph

5 Commits

Author SHA1 Message Date
Cheffromspace
faa60f4f55 feat: Add simplified quickstart guide for easier onboarding (#157) 
* feat: Add simplified quickstart guide and minimal env configuration

- Add QUICKSTART.md with streamlined setup instructions
- Create .env.quickstart with only essential configuration variables
- Focus on getting users running quickly with Cloudflare Tunnel
- Add Discord and documentation badges for community support
- Update .gitignore to include .env.quickstart

The quickstart guide provides a clear path from zero to running webhook
in approximately 15 minutes, using Claude Max subscription authentication
via the interactive setup script.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

* fix: Exclude .env.quickstart from credential audit false positives

The .env.quickstart file is a template with placeholder values and should not be flagged as a security issue during credential audits.

* fix: Update Discord server ID from placeholder to actual ID

Replace the placeholder Discord server ID (1234567890) with the actual
server ID (1313320949214814228) in the Discord badge. This fixes the
issue identified in PR #157 review where the badge was showing a
placeholder value.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

* fix: Update Discord server ID and add missing EOF newline

- Update Discord server ID to correct value (1377708770209304676)
- Add missing newline at end of .env.quickstart for POSIX compliance
- Addresses PR #157 review comments

---------

Co-authored-by: Claude <noreply@anthropic.com>
 2025-06-01 14:55:30 -05:00
Jonathan
a45b039777 chore: remove outdated and redundant shell scripts 
Remove 18 scripts that are no longer needed:
- Archived scripts directory (one-time migrations, old tests)
- Redundant build scripts (replaced by build.sh and GitHub Actions)
- One-time setup/migration scripts
- Scripts with security anti-patterns (hardcoded paths, baked credentials)
- Unnecessary backup scripts

Remaining scripts that need review are tracked in #139

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-05-30 10:35:12 -05:00
Jonathan Flatt
0e4d22bcdc fix: exclude test redaction files from credential scanner 
Prevents false positives in security audit by excluding test files that contain intentional fake credentials for testing logger redaction functionality.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-05-26 22:41:14 -05:00
Jonathan Flatt
7e545475d0 security: Implement comprehensive credential protection system 
Replace environment variable credentials with secure file-based mounting
to prevent runtime credential exposure that was causing security leaks.

Key security improvements:
- Docker secrets integration for credential mounting
- Secure credential loader utility (secureCredentials.js)
- Enhanced logging redaction for all credential types
- Pre-commit security scanning with multiple tools
- Automated security audit workflow and scripts
- File-based credentials with proper 600 permissions

Services updated:
- githubController.js: Use secure credentials for webhook verification
- claudeService.js: Use secure credentials for GitHub/Anthropic APIs
- githubService.js: Use secure credentials for GitHub API calls
- logger.js: Enhanced redaction patterns for all credential types

New security infrastructure:
- ./scripts/setup/setup-secure-credentials.sh: Setup script for secure credentials
- ./scripts/security/credential-audit.sh: Comprehensive security audit
- .github/workflows/security-audit.yml: Automated security scanning
- docker-compose.yml: Updated to use Docker secrets by default
- k8s/secrets.yaml: Kubernetes secrets configuration
- systemd/claude-webhook.service: Systemd service configuration

This eliminates credential exposure in:
- Environment variables and process lists
- Container logs and debug output
- Git commits and PR comments
- Runtime error messages

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-05-21 23:03:07 -05:00
Jonathan Flatt
4cdad828c4 Reorganize scripts into structured directory layout and consolidate functionality 
This commit reorganizes all scripts in the repository into a more structured directory layout for better maintainability:
- Categorizes scripts by functionality (setup, build, aws, runtime, security, utils)
- Organizes test scripts into logical categories
- Consolidates redundant scripts with unified interfaces
- Adds backward compatibility wrappers
- Adds detailed SCRIPTS.md documentation

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-05-21 00:19:07 +00:00