github TypeScript analyzed 9529a5e unconfirmed MCP

app-vitals/shipwright

github

The open-source autonomous delivery agent for Claude Code.

maintainer: app-vitals
licence: MIT
first seen: 2026-06-30
last seen: 2026-09-10
releases · 30d: 0
short id

Drift inferred · capture-to-capture

HIGH 2026-09-10 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-10 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-10 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-10 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-10 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-10 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright
HIGH 2026-09-09 code analysis flagged committed secret in app-vitals/shipwright

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 9529a5e · analyzer v33 · 1h ago

skills & prompt files 33

danger signals11

suspicious endpoint sentry.io (telemetry) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/check-error-patrol.ts :132 `https://sentry.io/api/0/organizations/${sentryOrg}/issues/?query=is:unresolved`,
committed secret Slack token app-vitals-shipwright-9529a5e/admin/e2e/agents-page.e2e.ts :172 xoxb-s…(17 chars, redacted)
committed secret Slack token app-vitals-shipwright-9529a5e/admin/e2e/test-server.ts :245 xoxb-s…(17 chars, redacted)
committed secret Slack token app-vitals-shipwright-9529a5e/admin/src/admin-dev-login.smoke.test.ts :210 xoxb-m…(19 chars, redacted)
committed secret Slack token app-vitals-shipwright-9529a5e/admin/src/admin-local-agent.smoke.test.ts :85 xoxb-m…(19 chars, redacted)
committed secret Slack token app-vitals-shipwright-9529a5e/admin/src/admin-ui.smoke.test.ts :185 xoxb-m…(19 chars, redacted)
committed secret Slack token app-vitals-shipwright-9529a5e/admin/src/agent-provisioner.integration.test.ts :828 xoxp-j…(18 chars, redacted)
committed secret Slack token app-vitals-shipwright-9529a5e/admin/src/agents-api.smoke.test.ts :1914 xoxp-u…(15 chars, redacted)
committed secret Slack token app-vitals-shipwright-9529a5e/admin/src/slack-provisioning-service.integration.test.ts :337 xoxb-n…(21 chars, redacted)
committed secret Slack token app-vitals-shipwright-9529a5e/agent/src/config.unit.test.ts :264 xoxp-a…(16 chars, redacted)
committed secret Slack token app-vitals-shipwright-9529a5e/lib/admin-types.ts :1727 xoxp-u…(15 chars, redacted)

code evidence vshipwright-1.6.23 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 635

filesystem 137

fs app-vitals-shipwright-9529a5e/admin/src/agent-type-manifest-loader.ts :28 import { readFileSync, readdirSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/agent-type-registry.schema.unit.test.ts :11 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/chat-service-provisioning-client.integration.test.ts :13 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/github-app-provisioning-client.integration.test.ts :13 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/google-auth-client.integration.test.ts :13 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/http-chat-client.integration.test.ts :13 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/kubernetes-client.integration.test.ts :12 import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
fs app-vitals-shipwright-9529a5e/admin/src/kubernetes-client.ts :23 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/okta-auth-client.integration.test.ts :13 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/pwa-https-gating.smoke.test.ts :11 import { mkdtempSync, mkdirSync, writeFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/pwa-routes.smoke.test.ts :10 import { mkdirSync, mkdtempSync, writeFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/schema.unit.test.ts :2 import { readFileSync } from "node:fs";

show 28 more

fs (weak) app-vitals-shipwright-9529a5e/admin/src/slack-provisioning-client.integration.test.ts :17 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/slack-provisioning-service.integration.test.ts :13 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/slack-provisioning.integration.test.ts :10 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/admin/src/task-store-provisioning-client.integration.test.ts :13 import { readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent-types/coding/manifest.content.test.ts :18 import { readFileSync } from "node:fs";
fs app-vitals-shipwright-9529a5e/agent/src/chat-poller.ts :17 import { mkdir, writeFile } from "node:fs/promises";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/chat-poller.unit.test.ts :9 import { mkdtemp, readFile, rm } from "node:fs/promises";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/check-deploy.unit.test.ts :12 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
fs app-vitals-shipwright-9529a5e/agent/src/check-helpers.ts :24 import { existsSync, readFileSync, readdirSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/check-helpers.unit.test.ts :19 } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/check-patch.unit.test.ts :15 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/config.unit.test.ts :10 import { mkdirSync, rmSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/cron-handler.smoke.test.ts :19 import { mkdirSync, mkdtempSync, writeFileSync } from "node:fs";
fs app-vitals-shipwright-9529a5e/agent/src/cron-handler.ts :9 import { existsSync, readFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/cron-handler.unit.test.ts :31 import { mkdirSync, mkdtempSync, writeFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/entrypoint.integration.test.ts :10 import { existsSync, mkdirSync, rmSync, symlinkSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/http-chat-service-client.integration.test.ts :19 import { readFileSync } from "node:fs";
fs app-vitals-shipwright-9529a5e/agent/src/piper-voice.ts :22 import { readdirSync } from "node:fs";
fs app-vitals-shipwright-9529a5e/agent/src/pr-state-reconciler.ts :142 import { existsSync, statSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/pr-state-reconciler.unit.test.ts :24 } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/sessions.integration.test.ts :9 import { readFileSync, rmSync, writeFileSync } from "node:fs";
fs app-vitals-shipwright-9529a5e/agent/src/sessions.ts :1 import { readFile, writeFile } from "node:fs/promises";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/setup.integration.test.ts :18 } from "node:fs";
fs app-vitals-shipwright-9529a5e/agent/src/setup.ts :22 } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/slack.integration.test.ts :15 import { unlinkSync, writeFileSync } from "node:fs";
fs app-vitals-shipwright-9529a5e/agent/src/slack.ts :9 import { existsSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/test-env.ts :3 import { mkdirSync, writeFileSync } from "node:fs";
fs (weak) app-vitals-shipwright-9529a5e/agent/src/voice.integration.test.ts :13 import { existsSync, statSync, unlinkSync, writeFileSync } from "node:fs";

97 more not shown — this panel samples each group; the count above is the real total.

shell / exec 40

shell (weak) app-vitals-shipwright-9529a5e/admin/e2e/agents-page.e2e.ts :26 import { type ChildProcess, spawn } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/admin/e2e/chat-degraded.e2e.ts :22 import { type ChildProcess, spawn } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/admin/e2e/chat-page.e2e.ts :18 import { type ChildProcess, spawn } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/admin/e2e/chat-progress.e2e.ts :23 import { type ChildProcess, spawn } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/admin/e2e/chat-thread-page.e2e.ts :17 import { type ChildProcess, spawn } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/admin/e2e/login-page.e2e.ts :21 import { type ChildProcess, spawn } from "node:child_process";
shell app-vitals-shipwright-9529a5e/admin/src/agent-manifest.ts :452 // spawnSync("gh", ...) calls, which block the whole process for
shell (weak) app-vitals-shipwright-9529a5e/admin/src/agents-api.integration.test.ts :442 const { execSync } = await import("node:child_process");
shell app-vitals-shipwright-9529a5e/admin/src/main.ts :91 const proc = Bun.spawn(
shell (weak) app-vitals-shipwright-9529a5e/admin/src/main.unit.test.ts :311 // Bun.spawn("bunx prisma migrate deploy") path requires a real Postgres and is
shell app-vitals-shipwright-9529a5e/agent/src/check-helpers.ts :1047 const proc = Bun.spawn(["gh", ...args], {
shell (weak) app-vitals-shipwright-9529a5e/agent/src/cron-handler.unit.test.ts :5 * `CronHandlerDeps.spawner` instead of letting the real Bun.spawn(["bun",

show 28 more

shell app-vitals-shipwright-9529a5e/agent/src/entrypoint-main.ts :52 const proc = Bun.spawnSync([cmd, ...args], {
shell app-vitals-shipwright-9529a5e/agent/src/pr-state-reconciler.ts :1669 const proc = Bun.spawn(
shell (weak) app-vitals-shipwright-9529a5e/agent/src/pr-state-reconciler.unit.test.ts :3458 Bun.spawnSync(["git", "init", "--quiet"], { cwd: repoPath });
shell app-vitals-shipwright-9529a5e/agent/src/setup-github-auth.ts :44 const { status } = spawnSync(cmd, args, { stdio: "inherit", env });
shell app-vitals-shipwright-9529a5e/agent/src/setup.ts :229 const proc = Bun.spawn([cmd, ...args], {
shell (weak) app-vitals-shipwright-9529a5e/agent/src/voice.integration.test.ts :11 import type { ChildProcess, SpawnOptions } from "node:child_process";
shell app-vitals-shipwright-9529a5e/agent/src/voice.ts :1 import { type SpawnOptions, spawn } from "node:child_process";
shell app-vitals-shipwright-9529a5e/agent/src/worktree-reaper.ts :29 import { execFile } from "node:child_process";
shell app-vitals-shipwright-9529a5e/chat/src/main.ts :45 const proc = Bun.spawn(
shell (weak) app-vitals-shipwright-9529a5e/mcp-server/src/main.smoke.test.ts :37 const proc = Bun.spawn(["bun", "run", "src/main.ts"], {
shell (weak) app-vitals-shipwright-9529a5e/metrics/e2e/dashboard.e2e.ts :14 import { type ChildProcess, spawn } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/check-docs-freshness.ts :32 import { spawnSync } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/check-helpers.ts :12 import { spawnSync } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/compute-unaddressed-findings.unit.test.ts :1543 const proc = Bun.spawn(["bun", "run", SCRIPT_PATH, input], {
shell (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/compute-unresolved-comment-check.unit.test.ts :676 const proc = Bun.spawn(["bun", "run", SCRIPT_PATH, input], {
shell (weak) app-vitals-shipwright-9529a5e/scripts/agent-workspace-pull.ts :289 const result = Bun.spawnSync(["gh", "repo", "clone", repo, dest], {
shell (weak) app-vitals-shipwright-9529a5e/scripts/check-coverage-gate.unit.test.ts :22 const proc = Bun.spawn(["bun", "run", SCRIPT_PATH], {
shell (weak) app-vitals-shipwright-9529a5e/scripts/check-downstream-compat.smoke.test.ts :28 import { execFileSync } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/scripts/dev-tmux.ts :603 exec(cmd.argv);
shell (weak) app-vitals-shipwright-9529a5e/scripts/dev.ts :48 const proc = Bun.spawn(config.cmd, {
shell (weak) app-vitals-shipwright-9529a5e/scripts/domain-guard.unit.test.ts :13 import { execSync } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/scripts/generate-mcp-tools.ts :301 Bun.spawnSync(["bunx", "biome", "format", "--write", outPath], {
shell (weak) app-vitals-shipwright-9529a5e/scripts/hitl.integration.test.ts :433 const proc = Bun.spawn(["bun", "run", TEE_FIXTURE_PATH, logPath], {
shell (weak) app-vitals-shipwright-9529a5e/scripts/hitl.ts :634 await exec(step);
shell (weak) app-vitals-shipwright-9529a5e/scripts/minikube.ts :502 exec(cmd.argv);
shell (weak) app-vitals-shipwright-9529a5e/scripts/quickstart.smoke.test.ts :20 import { execFileSync, spawnSync } from "node:child_process";
shell (weak) app-vitals-shipwright-9529a5e/scripts/test-env-preload.integration.test.ts :42 const proc = Bun.spawn(["bun", "run", "test", FIXTURE_FILENAME], {
shell app-vitals-shipwright-9529a5e/task-store/src/main.ts :71 const proc = Bun.spawn(

network 32

net (weak) app-vitals-shipwright-9529a5e/admin/e2e/agents-page.e2e.ts :50 const res = await fetch(url);
net (weak) app-vitals-shipwright-9529a5e/admin/e2e/chat-degraded.e2e.ts :48 const res = await fetch(url);
net (weak) app-vitals-shipwright-9529a5e/admin/e2e/chat-page.e2e.ts :42 const res = await fetch(url);
net (weak) app-vitals-shipwright-9529a5e/admin/e2e/chat-progress.e2e.ts :49 const res = await fetch(url);
net (weak) app-vitals-shipwright-9529a5e/admin/e2e/chat-thread-page.e2e.ts :43 const res = await fetch(url);
net (weak) app-vitals-shipwright-9529a5e/admin/e2e/login-page.e2e.ts :41 const res = await fetch(url);
net app-vitals-shipwright-9529a5e/admin/src/admin-ui-pages.ts :3445 * `/tasks?session=` fetch (no plan-time snapshot).
net app-vitals-shipwright-9529a5e/admin/src/main.ts :511 const res = await fetch(url, {
net app-vitals-shipwright-9529a5e/admin/src/push-toggle.ts :115 return fetch(SUBSCRIBE_URL, {
net app-vitals-shipwright-9529a5e/admin/src/pwa.ts :254 caches.match(request).then((cached) => cached || fetch(request)),
net app-vitals-shipwright-9529a5e/agent/src/chat-token-reporter.ts :107 const res = await fetch(url, {
net app-vitals-shipwright-9529a5e/agent/src/check-helpers.ts :13 * fake fetch in tests instead of overriding globalThis.fetch (agent/src test

show 20 more

net (weak) app-vitals-shipwright-9529a5e/agent/src/check-helpers.unit.test.ts :8 * overriding globalThis.fetch (agent/src test isolation rule: no
net (weak) app-vitals-shipwright-9529a5e/agent/src/cron-handler.smoke.test.ts :10 * - HTTP tests: real Bun.serve() via startHealthServer, hit with fetch() —
net app-vitals-shipwright-9529a5e/agent/src/cron-run-reporter.ts :131 const res = await fetch(url, {
net (weak) app-vitals-shipwright-9529a5e/agent/src/health.smoke.test.ts :5 * live fetch() calls to exercise HTTP route contracts (status codes,
net app-vitals-shipwright-9529a5e/agent/src/health.ts :105 async fetch(req) {
net app-vitals-shipwright-9529a5e/agent/src/slack.ts :79 resp = await fetch(url, {
net app-vitals-shipwright-9529a5e/chat/src/auth.ts :109 res = await fetch(`${normalizedBaseUrl}/agents/${agentId}`, {
net app-vitals-shipwright-9529a5e/chat/src/reply-notifier.ts :30 * tests inject a fake to avoid touching global.fetch (CLAUDE.md hard rule).
net (weak) app-vitals-shipwright-9529a5e/chat/src/reply-notifier.unit.test.ts :8 * global.fetch (CLAUDE.md test-isolation hard rule).
net app-vitals-shipwright-9529a5e/mcp-server/src/tool-caller.ts :18 /** Injected fetch (defaults to the global). */
net app-vitals-shipwright-9529a5e/metrics/src/dashboard/app.js :167 ? await fetch(`${API_BASE}/cost-efficiency?${q}`)
net (weak) app-vitals-shipwright-9529a5e/metrics/src/lib/accounts-client.integration.test.ts :86 // platform fetch (verified indirectly: construction succeeds).
net (weak) app-vitals-shipwright-9529a5e/metrics/src/lib/admin-metrics-client.integration.test.ts :92 return fetch(input, init);
net (weak) app-vitals-shipwright-9529a5e/metrics/src/lib/task-store-client.integration.test.ts :98 // platform fetch (verified indirectly: construction succeeds).
net (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/check-error-patrol.ts :131 const res = await fetch(
net (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/check-helpers.ts :318 const res = await fetch(`${baseUrl}/tasks?${params}`, { headers });
net (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/slack-say.ts :126 const res = await deps.fetch("https://slack.com/api/chat.postMessage", {
net (weak) app-vitals-shipwright-9529a5e/scripts/dev-tmux.ts :37 import { connect } from "node:net";
net (weak) app-vitals-shipwright-9529a5e/scripts/hitl.ts :379 const res = await fetch(`${url}/health`);
net app-vitals-shipwright-9529a5e/task-store/src/auth.ts :158 res = await fetch(`${normalizedBaseUrl}/agents/${agentId}`, {

secrets 35

secrets (weak) app-vitals-shipwright-9529a5e/admin/e2e/test-server.ts :34 process.env.ADMIN_E2E_SESSION_SECRET ?? "e2e-admin-test-secret-32chars!!!";
secrets (weak) app-vitals-shipwright-9529a5e/admin/src/agent-envs.integration.test.ts :76 const origKey = process.env.SHIPWRIGHT_ENCRYPTION_KEY;
secrets (weak) app-vitals-shipwright-9529a5e/admin/src/agent-patch-author-allowlist.integration.test.ts :106 const savedKey = process.env.SHIPWRIGHT_ENCRYPTION_KEY;
secrets (weak) app-vitals-shipwright-9529a5e/admin/src/agents-api.integration.test.ts :134 const savedKey = process.env.SHIPWRIGHT_ENCRYPTION_KEY;
secrets app-vitals-shipwright-9529a5e/admin/src/main.ts :371 const sessionSecret = process.env.SHIPWRIGHT_SESSION_SECRET ?? "";
secrets app-vitals-shipwright-9529a5e/admin/src/token-crypto.ts :36 key = process.env.SHIPWRIGHT_ENCRYPTION_KEY,
secrets (weak) app-vitals-shipwright-9529a5e/admin/src/token-crypto.unit.test.ts :136 const originalKey = process.env.SHIPWRIGHT_ENCRYPTION_KEY;
secrets app-vitals-shipwright-9529a5e/agent/src/check-helpers.ts :569 const taskStoreToken = (process.env.SHIPWRIGHT_TASK_STORE_TOKEN ?? "").trim();
secrets (weak) app-vitals-shipwright-9529a5e/agent/src/check-helpers.unit.test.ts :736 token: process.env.SHIPWRIGHT_TASK_STORE_TOKEN,
secrets app-vitals-shipwright-9529a5e/agent/src/claim-invariant-reconciler.ts :183 const taskStoreToken = (process.env.SHIPWRIGHT_TASK_STORE_TOKEN ?? "").trim();
secrets (weak) app-vitals-shipwright-9529a5e/agent/src/config.unit.test.ts :24 process.env.SHIPWRIGHT_AGENT_API_KEY = "key-123";
secrets (weak) app-vitals-shipwright-9529a5e/agent/src/github-app-auth.integration.test.ts :240 GH_APP_PRIVATE_KEY: process.env.GH_APP_PRIVATE_KEY,

show 23 more

secrets app-vitals-shipwright-9529a5e/agent/src/github-app-auth.ts :121 const privateKey = process.env.GH_APP_PRIVATE_KEY?.replace(/\\n/g, "\n");
secrets app-vitals-shipwright-9529a5e/agent/src/index.ts :154 botToken: process.env.SLACK_BOT_TOKEN ?? "",
secrets (weak) app-vitals-shipwright-9529a5e/agent/src/loop-orchestrator.integration.test.ts :120 token: process.env.SHIPWRIGHT_TASK_STORE_TOKEN,
secrets app-vitals-shipwright-9529a5e/agent/src/pr-state-reconciler.ts :1502 const taskStoreToken = (process.env.SHIPWRIGHT_TASK_STORE_TOKEN ?? "").trim();
secrets (weak) app-vitals-shipwright-9529a5e/agent/src/pr-state-reconciler.unit.test.ts :2040 process.env.SHIPWRIGHT_TASK_STORE_TOKEN;
secrets (weak) app-vitals-shipwright-9529a5e/agent/src/test-env.ts :19 process.env.SLACK_BOT_TOKEN = "xoxb-t…(15 chars, redacted)";
secrets app-vitals-shipwright-9529a5e/chat/src/main.ts :99 const seedToken = process.env.CHAT_SEED_ADMIN_TOKEN;
secrets (weak) app-vitals-shipwright-9529a5e/lib/sentry.unit.test.ts :182 process.env.ANTHROPIC_API_KEY = "sk-ant-super-secret-value";
secrets app-vitals-shipwright-9529a5e/mcp-server/src/main.ts :27 const token = process.env.SHIPWRIGHT_MCP_SERVER_TOKEN;
secrets (weak) app-vitals-shipwright-9529a5e/metrics/e2e/test-server.ts :15 process.env.SHIPWRIGHT_SESSION_SECRET ?? "e2e-test-session-secret-32b";
secrets app-vitals-shipwright-9529a5e/metrics/src/api.ts :854 deps?.sessionSecret ?? process.env.SHIPWRIGHT_SESSION_SECRET ?? "";
secrets app-vitals-shipwright-9529a5e/metrics/src/lib/accounts-client.ts :8 * const client = new HttpAccountsClient('http://accounts-api:3458', process.env.SHIPWRIGHT_API_KEY);
secrets app-vitals-shipwright-9529a5e/metrics/src/lib/session-middleware.ts :6 * app.use('*', createSessionMiddleware(process.env.SHIPWRIGHT_SESSION_SECRET ?? ''))
secrets (weak) app-vitals-shipwright-9529a5e/metrics/src/lib/test-helpers.ts :136 const canaryKey = process.env.TEST_CANARY_API_KEY;
secrets (weak) app-vitals-shipwright-9529a5e/metrics/src/secrets.integration.test.ts :99 const originalValue = process.env.TEST_NET_ERR_SECRET;
secrets app-vitals-shipwright-9529a5e/metrics/src/server.ts :74 process.env.METRICS_INTERNAL_API_KEY ?? "",
secrets (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/check-error-patrol.ts :127 const sentryAuthToken = (process.env.SENTRY_AUTH_TOKEN ?? "").trim();
secrets (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/check-helpers.ts :301 const taskStoreToken = (process.env.SHIPWRIGHT_TASK_STORE_TOKEN ?? "").trim();
secrets (weak) app-vitals-shipwright-9529a5e/plugins/shipwright/scripts/check-helpers.unit.test.ts :444 token: process.env.SHIPWRIGHT_TASK_STORE_TOKEN,
secrets (weak) app-vitals-shipwright-9529a5e/scripts/agent-workspace-pull.ts :306 const apiKey = process.env.SHIPWRIGHT_ADMIN_API_KEY;
secrets (weak) app-vitals-shipwright-9529a5e/scripts/check-config-docs.unit.test.ts :24 const src = "const x = process.env.ANTHROPIC_API_KEY;";
secrets (weak) app-vitals-shipwright-9529a5e/scripts/hitl.ts :1078 process.env.SHIPWRIGHT_TASK_STORE_TOKEN = DEV_AGENT_TOKEN;
secrets app-vitals-shipwright-9529a5e/task-store/src/main.ts :123 const seedToken = process.env.TASK_STORE_SEED_ADMIN_TOKEN;

install hooks 3

postinstall app-vitals-shipwright-9529a5e/admin/package.json :9 prisma generate --schema=prisma/schema.prisma
postinstall app-vitals-shipwright-9529a5e/chat/package.json :9 prisma generate --schema=prisma/schema.prisma
postinstall app-vitals-shipwright-9529a5e/task-store/package.json :9 prisma generate --schema=prisma/schema.prisma

declared dependencies 14

@prisma/client@^6.19.2
@biomejs/biome@^1.9.4
openapi-fetch@^0.17.0
openapi-typescript@^7
@semantic-release/changelog@^6.0.3
@semantic-release/commit-analyzer@^13.0.1
@semantic-release/exec@^7.1.0
@semantic-release/git@^10.0.1
@semantic-release/github@^12.0.9
@semantic-release/release-notes-generator@^14.1.1
conventional-changelog-conventionalcommits@^9.3.1
prisma@^6.19.2

show 2 more

semantic-release@^25.0.3
typescript@^5.7.3