Skip to content

cfg: mask sensitive values in DebugConfig log output#1392

Draft
applike-ss wants to merge 1 commit into
mainfrom
fix/07-cfg-debug-value-masking
Draft

cfg: mask sensitive values in DebugConfig log output#1392
applike-ss wants to merge 1 commit into
mainfrom
fix/07-cfg-debug-value-masking

Conversation

@applike-ss

Copy link
Copy Markdown
Contributor

DebugConfig now redacts the logged value for any config key whose name contains password, secret, token, key, dsn, credential, or access_key, replacing it with ***. The config fingerprint is still computed from the original values so that it accurately reflects all configuration changes.

@applike-ss applike-ss force-pushed the fix/07-cfg-debug-value-masking branch from b647ecf to 07c89f0 Compare April 20, 2026 07:00
Comment thread pkg/cfg/debug.go Outdated
@applike-ss applike-ss force-pushed the fix/07-cfg-debug-value-masking branch from 79e91b1 to 60b9971 Compare April 23, 2026 11:41
@applike-ss applike-ss force-pushed the fix/07-cfg-debug-value-masking branch from 60b9971 to 00144b2 Compare April 24, 2026 09:38
@applike-ss applike-ss marked this pull request as draft April 24, 2026 11:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants