Claude 0bc6f9c3cd fix: shorten empty-Vault placeholders to dodge secret-scan TOKEN= pattern ... The lib/secret-scan.sh `(SECRET|TOKEN|...)=<16+ non-space chars>` rule flagged the long `INTERNAL_TOKEN=VAULT-EMPTY-run-tools-vault- seed-forgejo-sh` placeholder as a plaintext secret, failing CI's secret-scan workflow on every PR that touched nomad/jobs/forgejo.hcl. Shorten both placeholders to `seed-me` (<16 chars) — still visible in a `grep FORGEJO__security__` audit, still obviously broken. The operator-facing fix pointer moves to the `# WARNING` comment line in the rendered env and to a new block comment above the template stanza. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-16 17:33:15 +00:00
..
forgejo.hcl	fix: shorten empty-Vault placeholders to dodge secret-scan TOKEN= pattern	2026-04-16 17:33:15 +00:00