opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Hardening: Relaxed Git push/force restrictions and sanitized configuration secrets

Browse source
This commit is contained in:
stevef 2026-03-28 15:41:11 +01:00
parent 56478a031b
commit 746c3ec02c
1 changed files with 26 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

32
k3s/configmap.yaml
View file

@ -46,7 +46,7 @@ data:
}, },
"telegram": { "telegram": {
"enabled": true, "enabled": true,
"token": "REDACTED", "token": "<TELEGRAM_TOKEN>",
"base_url": "", "base_url": "",
"proxy": "", "proxy": "",
"allow_from": [ "allow_from": [
@ -285,13 +285,13 @@ data:
"model_name": "nemotron-3-super-120b-a12b", "model_name": "nemotron-3-super-120b-a12b",
"model": "nvidia/nemotron-3-super-120b-a12b", "model": "nvidia/nemotron-3-super-120b-a12b",
"api_base": "https://integrate.api.nvidia.com/v1", "api_base": "https://integrate.api.nvidia.com/v1",
"api_key": "REDACTED" "api_key": "<NVIDIA_API_KEY>"
}, },
{ {
"model_name": "azure-grok", "model_name": "azure-grok",
"model": "openai/grok-4-fast-non-reasoning", "model": "openai/grok-4-fast-non-reasoning",
"api_base": "https://TestSJF.openai.azure.com/openai/v1/", "api_base": "https://TestSJF.openai.azure.com/openai/v1/",
"api_key": "REDACTED" "api_key": "<AZURE_API_KEY>"
}, },
{ {
"model_name": "cerebras-llama-3.3-70b", "model_name": "cerebras-llama-3.3-70b",
@ -454,7 +454,10 @@ data:
"enable_deny_patterns": true, "enable_deny_patterns": true,
"allow_remote": true, "allow_remote": true,
"custom_deny_patterns": null, "custom_deny_patterns": null,
"custom_allow_patterns": null, "custom_allow_patterns": [
"^git\\s+push\\b",
"^git\\s+force\\b"
],
"timeout_seconds": 60 "timeout_seconds": 60
}, },
"skills": { "skills": {
@ -497,7 +500,22 @@ data:
"use_bm25": true, "use_bm25": true,
"use_regex": false "use_regex": false
}, },
"servers": {} "servers": {
"hdn-server": {
"enabled": true,
"command": "",
"type": "sse",
"url": "http://hdn-server:8080/mcp"
},
"n8n-test": {
"enabled": true,
"type": "sse",
"url": "https://n8namber.app.n8n.cloud/mcp/a5747ff8-db9b-4326-8bef-474301f65251",
"headers": {
"Authorization": "Bearer 97340696-89AE-43B2-B6E2-080E062150C9"
}
}
}
}, },
"whitelist": [ "whitelist": [
"spawn", "spawn",
@ -511,7 +529,9 @@ data:
"message", "message",
"weather", "weather",
"summarize", "summarize",
"github" "github",
"hdn-server",
"n8n-test"
], ],
"whitelist_enabled": true, "whitelist_enabled": true,
"append_file": { "append_file": {