Paths/Copilot Engineer/Reviewing AI-Assisted Code / Guardrails
Scan Every Change for Secrets
A generated file can carry a value that was in the context. Write the scan that catches it before the commit lands.
Validator
⏱ 0:00
IDLE — checks run live as you type commands; submit when done
01Requirements
live checks- File ~/review/secret-scan.sh exists○
- The script inspects the staged changes○
- The script looks for access keys and private keys○
- The script fails the run when it finds one○
02Walkthrough
1 of 4 revealed- 01
Create the review directory
The guardrails live with the review rules.
mkdir -p ~/review - 3 locked · each failed submit reveals one
03Stuck?
0 of 3 revealedTake a hint without losing the lab — each one points at the thing to look at, not at the answer.
04AI Tutor
guides, never solvesTell me what you're stuck on — I'll nudge, not solve. Which requirement are you looking at?
04Notebook
saved locally in this browserlearner@lab — ubuntu:24.04
Session is disposable
↑/↓ recalls commands · Ctrl+Enter submits · type help for the command list