Skip to content

publication-checklist.md

Latest commit

 

History

History
40 lines (27 loc) · 1.24 KB

publication-checklist.md

File metadata and controls

40 lines (27 loc) · 1.24 KB
Raw

Publication checklist

Use before the first public push and before large doc imports.

Never commit

  • Real hostnames, SFTP URLs, cloud project IDs, customer names
  • .env files with credentials
  • Internal org program plans, DR runbooks, live STATE/HANDOFF content
  • Coursework, resumes, or graded assignments from personal education folders

Placeholders

Use consistently:

  • {{ORG}}, {{PROJECT}}, {{APP}}
  • {{STAGING_URL}}, {{PROD_URL}}
  • {{GCP_PROJECT}}, {{AWS_ACCOUNT}}, {{OCI_TENANCY}}

Automated scan

./scripts/leak-scan.sh

Generic checks run from the repo. For your org hostnames and product codenames, copy scripts/leak-scan.patterns.example to scripts/leak-scan.patterns (gitignored) — never commit real internal names to this public repository.

Manual review

  • README and playbooks contain no real URLs except example.com style
  • Screenshots redacted or synthetic
  • Git history does not contain secrets (use git log -p spot check)
  • Agent prompts do not reference proprietary product or internal program names
  • No links to private commercial products unless you intend public marketing

Agent sessions

If credentials were pasted into an AI tool, rotate them before publishing.