Repository navigation
[C-4] ~26MB of binaries committed to main (deploy-backup-20260730 + token-recovery ELF) #79
Description
Activity
Disposition: fork-specific — not migrated. The ~26MB committed binaries (deploy-backup-20260730 + token-recovery ELF) are on the fork's own history/branches; upstream main's largest blob is CHANGELOG.md at ~250KB (verified 2026-10-09 on 4614ac2) — the finding does not apply to OpenTollGate/tollgate-module-basic-go. No upstream action. The fork's refs remain readable after archiving (per the retirement plan's archive-not-delete decision, OpenTollGate#758).
MEDIUM: ~26 MB of binaries committed to upstream main by e7161ab:
deploy-backup-20260730/tollgate-backup.tar.gz(2.2 MB),deploy-backup-20260730/tollgate-wrt-v0.5.0-backup(11 MB),scripts/token-recovery/token-recovery(13 MB).IMPORTANT: The backup contains live key material and is owned by an external secrets owner. Removal is tracked separately and requires coordination with the secrets owner. This issue serves as a pointer to that external work.
Recommended: A follow-up PR removing them + .gitignore entries (PR OpenTollGate#354 already adds the .gitignore line and the token-recovery source that builds the committed binary).
Evidence: /home/ubuntu/src/tollgate_audit_report_2026-08-26.md §1, line 22; §2.4, line 56