From 0a26f815da6d92c62fc88489defd1c1b94679037 Mon Sep 17 00:00:00 2001
From: Tom Boucher <trekkie@nomorestars.com>
Date: Tue, 24 Mar 2026 16:36:32 -0400
Subject: [PATCH] ci: add .secretscanignore for plan-phase.md false positive
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

plan-phase.md contains illustrative DATABASE_URL/REDIS_URL examples
in documentation text, not real credentials. The secret-scan.sh script
already supports .secretscanignore — this file activates it.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .secretscanignore | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.secretscanignore b/.secretscanignore
index 878c795a..681532e1 100644
--- a/.secretscanignore
+++ b/.secretscanignore
@@ -6,3 +6,6 @@
 # Examples:
 # tests/fixtures/fake-credentials.json
 # docs/examples/sample-config.yml
+
+# plan-phase.md contains illustrative DATABASE_URL/REDIS_URL examples
+get-shit-done/workflows/plan-phase.md