nyrn
/
openclaw
mirror of https://github.com/openclaw/openclaw.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Docs: clarify main secret scan behavior

This commit is contained in:
Vincent Koc 2026-03-06 14:41:23 -05:00
parent 66112980aa
commit 042b2c867d
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/gateway/security/index.md
View File

@ -1159,9 +1159,9 @@ If your AI does something bad:
## Secret Scanning (detect-secrets)
CI runs the `detect-secrets` pre-commit hook in the `secrets` job.
It checks changed files when a base commit is available, and falls back to an
all-files scan otherwise. If it fails, there are new candidates not yet in the
baseline.
Pushes to `main` always run an all-files scan. Pull requests use a changed-file
fast path when a base commit is available, and fall back to an all-files scan
otherwise. If it fails, there are new candidates not yet in the baseline.
### If CI fails