Files
Sanchit Monga eaf9e08924 fix(security): remove leaked API key and add gitleaks secret scanning
Replace hardcoded production API key and URL with YOUR_* placeholders
so the existing credential-detection guard falls back to dev mode.
Add gitleaks GitHub Action to scan every push to main and every PR
for secrets, with custom rules for RunAnywhere API keys, Railway URLs,
and Supabase credentials.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-22 13:46:35 -08:00
..