Entry 007 ProgressHeldkeys: finding an agent’s credentials without showing their values
exit 0Ran itIt works. It classified 32 credentials in 10 ms and exposed no secret value.
- Day 3Active
- Day 7Quiet
- Day 15Upcoming
- Day 30Upcoming
- Day 90Upcoming
- Day 180Upcoming
- Day 365Upcoming
Latest check Day 7, Fri 2026.10.23
- Commits since launch
- 5 → 15
- Stars
- 4 → 6
- Last commit
- 2026.10.17
Numbers by checkpoint
| Checkpoint | Checked | State | Commits since launch | Stars | Releases | Contributors | Last commit |
|---|---|---|---|---|---|---|---|
| Day 1 | Sat 2026.10.17 | 5 | 4 | 5 v0.2.3 | 1 | 2026.10.16 | |
| Day 3 | Mon 2026.10.19 | Active | 15 | 6 | 5 v0.2.3 | 1 | 2026.10.17 |
| Day 7 | Fri 2026.10.23 | Quiet | 15 | 6 | 5 v0.2.3 | 1 | 2026.10.17 |
| Day 15 | Due Sat 2026.10.31 | Upcoming | |||||
| Day 30 | Due Sun 2026.11.15 | Upcoming | |||||
| Day 90 | Due Thu 2027.01.14 | Upcoming | |||||
| Day 180 | Due Wed 2027.04.14 | Upcoming | |||||
| Day 365 | Due Sat 2027.10.16 | Upcoming | |||||
What changed
Day 7 Fri 2026.10.23
No commits in this period.
Day 3 Mon 2026.10.19
- v0.2.0: risks listed in `.heldkeys.toml` with a reason are left out of the results. With a previous report as the baseline, CI fails only on new findings.
- v0.2.1: an interrupted Docker or Kubernetes scan no longer leaves the copied binary in the scan target.
- CI now tests the parsers with random input. A stray brace inside an array no longer sends the TOML parser into an infinite loop.