github-release

1# GitHub Release
2 
3Sanitize and release projects to GitHub. Two-phase workflow: safety checks first, then tag and publish.
4 
5## Prerequisites
6 
7- `gh` CLI installed and authenticated (`gh auth status`)
8- `gitleaks` installed for secrets scanning (`brew install gitleaks` or download from GitHub)
9- Git repository with a remote configured
10 
11## Workflow
12 
13### Phase 1: Sanitize
14 
15Run these checks before any public release. Stop on blockers.
16 
17#### 1. Scan for Secrets (BLOCKER)
18 
19```bash
20gitleaks detect --no-git --source=. --verbose
21```
22 
23If secrets found: **STOP**. Remove secrets, move to environment variables. Check git history with `git log -S "secret_value"` — if in history, use BFG Repo-Cleaner.
24 
25If gitleaks not installed, do manual checks:
26 
27```bash
28# Check for .env files
29find . -name ".env*" -not -path "*/node_modules/*"
30 
31# Check config files for hardcoded secrets
32grep -ri "api_key\|token\|secret\|password" wrangler.toml wrangler.jsonc .dev.vars 2>/dev/null
33```
34 
35#### 2. Remove Personal Artifacts
36 
37Check for and remove session/planning files that shouldn't be published:
38 
39- `SESSION.md` — session state
40- `planning/`, `screenshots/` — working directories
41- `test-*.ts`, `test-*.js` — local test files
42 
43Either delete them or add to `.gitignore`.
44 
45#### 3. Validate LICENSE
46 
47```bash
48ls LICENSE LICENSE.md LICENSE.txt 2>/dev/null
49```
50…