chore(security): purge distro raw dumps (supplier PII + account JWT) from git + image

The RareWaves/Inertia scrapes (rarw*.txt, inertia.txt, the SOH .xlsx) were tracked
in git AND baked into the Docker image (COPY . . with no exclusion). They carry a live
RareWaves buyer JWT and a supplier contact email — they don't belong in either.

- git rm --cached the 7 dumps; moved to local-only ingest_raw/
- .gitignore + .dockerignore: ingest_raw/, rarw*.txt, inertia.txt, *.xlsx
- nothing reads them by path (the xlsx ingest takes a base64 upload), so no code change

NOTE: still present in history (ef37063, 926468a) — scrub separately if the JWT is live.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
type-two 2026-06-30 15:15:43 +10:00
parent 5551963ef4
commit 9e3c132a11
9 changed files with 11 additions and 28755 deletions

View File

@ -7,3 +7,8 @@ disc_images/
# NOTE: do NOT exclude webstore/ — main.py mounts /store from it (the 3D virtual store).
# Only disc_images/ (~900MB, volume-mounted at runtime) is worth excluding from the build context.
*.md
# distro raw dumps — never bake supplier PII / account tokens into the image
ingest_raw/
rarw*.txt
inertia.txt
*.xlsx

6
.gitignore vendored
View File

@ -3,3 +3,9 @@ __pycache__/
.env
.venv/
venv/
# distro raw dumps — saved scrapes/spreadsheets for manual ingest. Never commit:
# they carry supplier PII + live account tokens (e.g. a RareWaves buyer JWT). Local-only.
ingest_raw/
rarw*.txt
inertia.txt
*.xlsx

View File

@ -1,30 +0,0 @@
Inertia Warner Stock List - 26/06/2026
Inbox
Yvonne Cho <yvonne@inertiamusic.com>
Attachments
Fri, Jun 26, 12:39PM (22 hours ago)
to Yvonne
Hi all,
Please find attached todays Inertia/Warner SOH list. Please feel free to place orders on this document add your QTYs to the first column (highlighted in blue) if you wish to place an order. This stock list reflects the current stock situation, and new SKUs will continue to be added to the stock lists as they become available.
Those titles highlighted in blue have been re stocked in the last 48 business hours.
Thanks,
Yvonne
One attachment
• Scanned by Gmail

File diff suppressed because one or more lines are too long

File diff suppressed because one or more lines are too long

File diff suppressed because one or more lines are too long

File diff suppressed because one or more lines are too long

File diff suppressed because one or more lines are too long