Two pre-existing PASTE_AUTH tokens in scripts/build.sh and scripts/build-linux-notify.sh are real and should be rotated if the paste.tbs.amn.gg / paste.dk.manko.yoga endpoints still authenticate — this allowlist only silences the pre-push hook, it does not remove the exposure. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
728 B
728 B