fix(cleanup): simple 21-day age-based retention + OAuth token (closes #33) - #36
Merged
Conversation
fix(cleanup): simple 21-day age-based retention + OAuth token; add CodeQL (closes #33) Per issue #33: - Retention default 21 days (was 90); keep the weekly Sunday schedule. - Cleanup now authenticates with the OAuth refresh token via GoogleDriveClient.createAuthClient (was an invalid GoogleAuth keyFile on the client-secret) — matches backup/restore. - Remove the GFS theater from cleanup.yml (retention_policy input, GFS_* env, and the log lines that claimed a policy the code never implemented). - Docs: corrected README + USERGUIDE 8.3/FAQ/19.6/SOX to describe the actual simple age-based (chain-aware) retention. Chain-protection safeguard retained. Security/quality: - Add CodeQL workflow (security-and-quality queries) to populate GitHub code scanning; Dependabot alerts currently 0. 105/105 tests pass, lint + headers clean, all workflow YAML valid. @
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #33.
createAuthClient) like backup/restore — previously it used an invalidGoogleAuthkeyFile on the client-secret.retention_policyinput,GFS_*env, and log lines that claimed a Grandfather-Father-Son policy the code never implemented.Security/quality: added a CodeQL workflow (security-and-quality queries) to populate GitHub code scanning; Dependabot alerts are currently 0.
QA: 105/105 tests pass, ESLint clean, SPDX headers present, all workflow YAML valid. No co-authors.