Daily AcreetionOS Update -- August 23, 2026

AcreetionOS GitLab CI now runs Secret Detection on every pipeline

Natalie pushed Secret Detection into .gitlab-ci.yml across the project repos, adding an automated scan that catches exposed tokens, keys, and credentials before they hit the mirror. It's a quiet but meaningful hardening of the supply chain — especially after last week's deploy-key hiccup that required re-triggering mirrors across acreetionos, acreetionos-archiso, acreetionos-terminal, and the appstore.

Development The mirror sync is back on track after the deploy-key fix; the 2026-08-17 sync completed cleanly and the archiso mirror now points to the correct GitLab project path. If you're building ISOs locally, pull the latest acreetionos-archiso — the CI/CD pipeline changes mean the build artifacts now publish to the right place without manual intervention. Check the changelog for the full list of mirrored repos and their status.

Community KDE Gear 26.08 dropped this week with the usual plasma polish and a handful of Apps updates; not directly on our stack since we ship Cinnamon, but worth watching if you run any KDE tools in Flatpak. On the distro side, AlmaLinux, Debian, and Fedora all pushed security updates Friday — chromium, libgit2, ansible-core, and sabnzbdplus among them. Our Arch base pulls fixes upstream fast, but the weekend rebuild window is a good time to pacman -Syu and verify your flatpaks.

Tip of the day If you're testing the new Secret Detection locally before pushing, run git secrets --scan (install via AUR) — it uses the same rule set as the CI job and catches false positives early. The docs have a quick-start for adding custom patterns if your project uses non-standard token formats.