When the Toller isn't working as it should

Its page shows only one line#

"The Toller is a developer's agent": developer features are off, because no developer agent is hired. Hire the Toller in Castellan, from the Porter's card. While they're off, it does no rounds.

A repository isn't looked at#

• It isn't anywhere it looks. It knows the repositories Castellan and Reeve know, and the usual folders. Add its folder, or the folder that holds it, to More folders with repositories.
• It's in Projects it doesn't look at. Take it out of that list.
• It's very big. Up to 20,000 files a repository, and 256 MB read a round: the rest comes on the next rounds.

A secret that isn't one is flagged#

Its general rule passes over placeholders, made-up values and test fixtures, but not every one. If you're sure it isn't a secret, press Seen, leave it: it stays quiet while it's there.

If it is one, and it says it was pushed, rotate it where it was issued, even after you take it out. See Secrets left in the open.

A finding I marked seen came back#

A seen finding stays quiet for as long as it's found, and for 90 days after it's gone. What comes back is a new finding: a different secret, or the same one in another file, say. Look at it as you would any other.

A dev server is listed as open, but my firewall blocks it#

The Toller doesn't read the firewall: open means listening on every address. To keep a server to this PC, bind it to 127.0.0.1 or localhost in its settings or command line.

A fix didn't take#

The page says what the fix did.

• Took the line out of the history, but it's still there: a shell window open now still has it in memory (the up arrow) until it's closed, and bash and zsh write their history back when they exit. Close the shells, and press the fix again if it's found once more.
• Added to .gitignore, but it's still committed: .gitignore keeps git from adding a file, not from tracking one already committed. Take it out of the index with git rm --cached <file>, and rotate the secret if it was pushed.

The first round is slow#

The first look reads every repository, history and Downloads file it can. Later rounds read only what changed.

Its page won't open#

Its page is http://toller.localhost:21818/. Open on the Porter's card in Castellan starts it if it's down. It starts at sign-in from the scheduled task \Toller\Home page.

Still stuck?#

Write to us at support@castellan-software.com with the Toller's version (on its card in Castellan), and what its page says. Never send a secret's value: the page never shows one, and we never need it.