Cybersecurity-Projects/PROJECTS/intermediate/credential-rotation-enforcer
CarterPerez-dev 873257ad4b feat(rotators): GitHub fine-grained PAT rotator + thin GitHub API client
Github::Client wraps the bearer-auth REST API with required
'X-GitHub-Api-Version: 2022-11-28' header. Implements me, create_pat
(POST /user/personal-access-tokens), delete_pat (DELETE by id).

GithubPatRotator's 4-step contract:
- generate: create_pat returns new id + token value (fresh PAT alongside old)
- apply: no-op (create_pat already active)
- verify: probe-client uses the NEW PAT to GET /user; success means it works
- commit: delete OLD PAT by id (tracked via old_pat_id tag)
- rollback_apply: delete NEW PAT

7 unit specs verify create/delete/me round-trips, full rotation path,
verify-on-401, and rollback deletion.
2026-04-29 01:05:10 -04:00
..
.github/workflows feat(cre): source tree skeleton with empty module dirs and CI workflow 2026-04-28 23:54:59 -04:00
spec feat(rotators): GitHub fine-grained PAT rotator + thin GitHub API client 2026-04-29 01:05:10 -04:00
src feat(rotators): GitHub fine-grained PAT rotator + thin GitHub API client 2026-04-29 01:05:10 -04:00
.editorconfig feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
.gitignore feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
LICENSE feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
Makefile feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
README.md feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
shard.lock feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
shard.yml feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00

README.md

Credential Rotation Enforcer (cre)

A Crystal-based daemon that tracks and enforces credential rotation policies across AWS Secrets Manager, HashiCorp Vault, GitHub fine-grained PATs, and local .env files.

Full README, asciinema demos, and walkthrough live in learn/. This README will be expanded in Phase 16 of the build.