cayce/cayce-ops
1
0
Fork 0
Code Issues 1 Pull Requests 25 Actions 5 Packages Projects Releases 2 Wiki Activity

Fix: redacción de credenciales en log del backup #17

Open
cayce wants to merge 0 commits from fix-backup-log-redaction into main
pull from: fix-backup-log-redaction
merge into: :main
Conversation 0 Commits - Files Changed -
cayce commented 2026-10-28 21:10:47 +00:00
Owner
Copy Link
Copy Source

Hallado en pruebas del punto 3: la redacción previa no matcheaba con un solo @ y filtraba user:pass al journald. Ahora solo scheme://:@host/db. En el transcript filtró solo la credencial de prueba ya pública (itest).

Hallado en pruebas del punto 3: la redacción previa no matcheaba con un solo @ y filtraba user:pass al journald. Ahora solo scheme://***:***@host/db. En el transcript filtró solo la credencial de prueba ya pública (itest).
cayce added 1 commit 2026-10-28 21:10:47 +00:00
fix(backup): log redaction leaked credentials — strip userinfo correctly
ci / lint-test-leaks (pull_request) Canceled after 0s
Details
ab301039ba 
The previous redaction (${PG_URL%%@*@}) never matched when the URL has a
single @, so the full DSN (user:password@host) went to the log/journal.
Now: scheme + ***:***@ + hostport/db only.

Found during the point-3 E2E test; the leaked value in that transcript
was the already-public test DB credential (itest probe DB).
Some required checks failed
ci / lint-test-leaks (pull_request) Canceled after 0s
Details
This branch is already included in the target branch. There is nothing to merge.
This branch is out-of-date with the base branch
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin fix-backup-log-redaction:fix-backup-log-redaction
git checkout fix-backup-log-redaction
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
pattern cayce (Cayce)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: cayce/cayce-ops#17