CR-2026-02-26: Credential Exposure — Verification

Security audit of settings.local.json completed

[x]

All credential patterns identified and cataloged

[x]

Shell history scanned for credential patterns

[x]

All hardcoded credentials removed from settings.local.json

[x]

Only $VAR references remain (no literal values)

[x]

No wildcard dsec/dsource/gopass patterns remain

[x]

Shell history cleaned of credential patterns

[x]

BORG passphrase rotated

[ ]

ISE ERS API credentials rotated

[ ]

pfSense API key rotated

[ ]

ISE DataConnect password rotated

[ ]

P0

Rotate BORG backup passphrase

PENDING

P1

Rotate ISE ERS API credentials

PENDING

P1

Rotate pfSense API key

PENDING

P2

Rotate ISE DataConnect password

PENDING

P2

Audit other workstations

PENDING