Skip to content

fix(redaction): redact credentials split by control bytes #1013

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
euxaristia wants to merge 16 commits into
base: main
Choose a base branch
from
Open

fix(redaction): redact credentials split by control bytes #1013

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
9d1c734
fix(redaction): strip C0/C1 bytes before shape matching
cairn-intern Aug 27, 2026
73911d4
test(redaction): cover UTF-8 C1 split and whitespace preservation
cairn-intern Aug 28, 2026
eeb2e07
fix(redaction): match split secrets without joining tokens
cairn-intern Aug 28, 2026
24d84b7
fix(redaction): preserve secret match boundaries
cairn-intern Sep 1, 2026
8fbc413
fix(redaction): separate logical candidate matching and trailing cont…
cairn-intern Sep 1, 2026
64b2100
fix(redaction): recognize terminal delimiters after earlier internal …
cairn-intern Sep 1, 2026
2d9e806
fix(redaction): address review findings for split credential scanning…
cairn-intern Sep 2, 2026
df0a3ef
Resolve secret boundary incrementally and bound test scaling
euxaristia Sep 5, 2026
87ba040
Format redaction.go with go fmt
euxaristia Sep 5, 2026
c72e99d
Consume split credential bytes across valid gaps and fail closed
euxaristia Sep 5, 2026
65e6e45
Track OpenAI kebab state incrementally and assert exact secret redaction
euxaristia Sep 5, 2026
10a8b7a
Eliminate quadratic validation on non-OpenAI shapes and remove unused…
euxaristia Sep 5, 2026
892af4b
Resolve review feedback for control-split secret redaction
euxaristia Sep 6, 2026
2bca57f
Remove unreachable redaction validation and restore formatting checks.
euxaristia Sep 6, 2026
9bff914
Redact neighboring JWTs without truncating independent-token detection.
euxaristia Sep 7, 2026
1f07cb6
Keep incomplete credential prefixes inside valid redaction candidates.
euxaristia Sep 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading