ciagent 995892a17f fix(security): untrack .env — secret in history, rotate forward
The .env file (containing GITEA_TOKEN) was committed in 0cba1aa during
P00 and remained tracked in git history despite the leak. The
.gitignore addition in 477b08c (P07) prevents future re-tracking but
does not untrack a file already in the index.

This commit runs 'git rm --cached .env' to remove the file from the
index while preserving the working-tree copy (which now contains the
rotated token post-P07-verify). The secret remains in git history at
0cba1aa and must be scrubbed by a human (see PHASE7_SECURITY_AUDIT.md
for the full remediation plan, including optional git-filter-repo
history rewrite).

Combined with 477b08c, this commit closes the forward-fix loop:
- .env is now ignored (.gitignore)
- .env is no longer tracked (this commit)
- New tokens in .env will not be committed accidentally
- The historical leak is documented for human remediation

---ci---
project: orca
phase: 7
milestone: v0.1
status: ship
version: v0.1.7
requirements:
  covered: [REQ-007]
  partial: []
---/ci---
2026-06-03 20:39:15 +00:00

Orca

Offline/CLI-first orchestration engine inspired by HashiCorp Nomad, far simpler than Kubernetes.

Status

v0.1: Foundation — see .ciagent/ROADMAP.md for the 6-phase plan.

Pillars

  • Simplicity — single binary, minimal dependencies
  • AI-first — CLI designed for both humans and AI agents
  • Offline-first — no cloud dependencies
  • CLI-first — primary interface is the command line
  • Security before features — NFRs ship before new functionality
  • Bug fixes before features — stability is paramount
  • NFRs before features — observability and auditability first

Quickstart

# Build
make build

# Run
./bin/orca version
./bin/orca --help

# Initialize local state
./bin/orca init

Subcommands

Command Description Status
orca version Print version info Phase 1
orca init Initialize local orca state Phase 1 (stub)
orca status Show orca daemon status Phase 1 (stub)
orca node Node management (join, leave, list) Phase 2
orca job Job management (run, list, stop, logs) Phase 3

Development

make build      # Build binary to ./bin/orca
make test       # Run tests with race detection
make lint       # Run golangci-lint
make fmt        # Format code
make release    # Build + create Gitea release (Phase 6)

Architecture

See .ciagent/ARCHITECTURE.md for full architecture details.

License

MIT — see LICENSE.

S
Description
Orca — offline/CLI-first orchestration engine (Nomad-inspired, far simpler than Kubernetes)
Readme MIT 6.2 MiB
Languages
Go 94.7%
Shell 4.9%
Makefile 0.3%