🛡️ Sentinel: [CRITICAL/HIGH] Fix PII exposure in policy override logs - #165

Closed

seonghobae wants to merge 27 commits into

mainfrom

fix/pii-logging-16240128950440010639

Commits on Aug 5, 2026

security: rebuild audit pseudonymization on current main
seonghobae
committed
5261356
test(security): require strong policy override keys
seonghobae
committed
28966e6
fix(security): reject weak policy override keys
seonghobae
committed
2e9c4a2
docs(security): document policy override key strength
seonghobae
committed
ac70dd7
fix: trigger CI due to strix timeout
seonghobae
committed
27106a5
chore: remove stray CI trigger script
seonghobae
committed
b3ad882
test: cover disabled policy signing startup path
seonghobae
committed
0e7770b
docs: consolidate unreleased changelog entries
seonghobae
committed
a86ab46
build: enforce zero missed production lines and branches
seonghobae
committed
eb34323
ci: verify exact PR head with coverage gates
seonghobae
committed
164aecf
ci: fuzz the exact pull request head
seonghobae
committed
294b30b
docs: record exact-head and coverage gates
seonghobae
committed
febb3fd
test: add shared security provider fixture
seonghobae
committed
9cf1ff8
test: cover null policy secret normalization
seonghobae
committed
3214bc0
test: cover tenant delete fail-closed branches
seonghobae
committed
62dac96
test: cover validation security edge cases
seonghobae
committed
0416068
test: cover conversion filename boundary
seonghobae
committed
6b61330
test: cover artifact deletion failure
seonghobae
committed
70f3399
test: cover repository delete edge cases
seonghobae
committed
d73571b
test: cover exception log sanitization
seonghobae
committed
36254ee
test: cover download filename and digest edges
seonghobae
committed
a1533de
fix: redact rejected parameter values
seonghobae
committed
31c4b4d
docs: record rejected-value redaction
seonghobae
committed
c0c0c45
test: cover every override header separator
seonghobae
committed
a308f0f
refactor: trust normalized policy secret contract
seonghobae
committed
39dc005
refactor: remove unreachable blank filename branch
seonghobae
committed
6e311ed
fix(ci): isolate exact-head evidence finalization runs
seonghobae
committed
8ca8958

Navigation Menu

Uh oh!

🛡️ Sentinel: [CRITICAL/HIGH] Fix PII exposure in policy override logs - #165

🛡️ Sentinel: [CRITICAL/HIGH] Fix PII exposure in policy override logs#165
seonghobae wants to merge 27 commits into
mainfrom
fix/pii-logging-16240128950440010639

Commits on Aug 5, 2026

security: rebuild audit pseudonymization on current main

test(security): require strong policy override keys

fix(security): reject weak policy override keys

docs(security): document policy override key strength

fix: trigger CI due to strix timeout

chore: remove stray CI trigger script

test: cover disabled policy signing startup path

docs: consolidate unreleased changelog entries

build: enforce zero missed production lines and branches

ci: verify exact PR head with coverage gates

ci: fuzz the exact pull request head

docs: record exact-head and coverage gates

test: add shared security provider fixture

test: cover null policy secret normalization

test: cover tenant delete fail-closed branches

test: cover validation security edge cases

test: cover conversion filename boundary

test: cover artifact deletion failure

test: cover repository delete edge cases

test: cover exception log sanitization

test: cover download filename and digest edges

fix: redact rejected parameter values

docs: record rejected-value redaction

test: cover every override header separator

refactor: trust normalized policy secret contract

refactor: remove unreachable blank filename branch

fix(ci): isolate exact-head evidence finalization runs