Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

feat: obfuscate secret in audit logs#6994

Merged
SATYAsasini merged 2 commits into
maindevtron-labs/devtron:mainfrom
feat-obfuscate-secret-audit-logdevtron-labs/devtron:feat-obfuscate-secret-audit-logCopy head branch name to clipboard
Jul 24, 2026
Merged

feat: obfuscate secret in audit logs#6994
SATYAsasini merged 2 commits into
maindevtron-labs/devtron:mainfrom
feat-obfuscate-secret-audit-logdevtron-labs/devtron:feat-obfuscate-secret-audit-logCopy head branch name to clipboard

Conversation

@SATYAsasini

@SATYAsasini SATYAsasini commented Jul 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Description

Fixes https://github.com/devtron-labs/sprint-tasks/issues/2932

Checklist:

  • The title of the PR states what changed and the related issues number (used for the release note).
  • Does this PR requires documentation updates?
  • I've updated documentation as required by this PR.
  • I have performed a self-review of my own code.
  • I have commented my code, particularly in hard-to-understand areas.
  • I have tested it for all user roles.
  • I have added all the required unit/api test cases.

Does this PR introduce a user-facing change?

Summary by Bito

  • Integrated secret masking in API logging middleware to prevent sensitive data exposure.
  • Updated dependencies for devtron-services/authenticator and common-lib to the latest versions.
  • Added a new secretScanner utility package to the vendor directory for detecting and masking credentials.
  • Implemented robust line-by-line scanning and masking logic for request payloads.

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown

Some linked issues are invalid. Please update the issue links:\nIssue # in is not found or invalid (HTTP }404).\n

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown

Some linked issues are invalid. Please update the issue links:\nIssue # in is not found or invalid (HTTP }404).\n

@sonarqubecloud

sonarqubecloud Bot commented Jul 23, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@SATYAsasini
SATYAsasini merged commit c652043 into main Jul 24, 2026
12 of 14 checks passed
@SATYAsasini
SATYAsasini deleted the feat-obfuscate-secret-audit-log branch July 24, 2026 08:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@prkhrkat prkhrkat prkhrkat approved these changes
@vikramdevtron vikramdevtron vikramdevtron approved these changes
@prakarsh-dt prakarsh-dt Awaiting requested review from prakarsh-dt prakarsh-dt is a code owner
@vivek-devtron vivek-devtron Awaiting requested review from vivek-devtron vivek-devtron is a code owner

Assignees

No one assigned

Labels

PR:Ready-to-Review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@SATYAsasini @prkhrkat @vikramdevtron
Morty Proxy This is a proxified and sanitized view of the page, visit original site.