Skip to content

⚡ Bolt: noema_review_gate.py 정규식 사전 컴파일 최적화 #290

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
github-actions merged 4 commits into from
Jul 5, 2026
Merged

⚡ Bolt: noema_review_gate.py 정규식 사전 컴파일 최적화 #290

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
3435c97
⚡ Bolt: noema_review_gate.py 정규식 사전 컴파일 최적화
seonghobae Jul 2, 2026
5db6e08
⚡ Bolt: Authorization 헤더 크리덴셜 마스킹 및 정규식 사전 컴파일 최적화
seonghobae Jul 2, 2026
f06bd8e
Merge branch 'main' into bolt-regex-precompile-noema-1777679121383785…
opencode-agent[bot] Jul 4, 2026
041dd65
Merge branch 'main' into bolt-regex-precompile-noema-1777679121383785…
opencode-agent[bot] Jul 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 13 additions & 7 deletions scripts/ci/noema_review_gate.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,18 +33,24 @@
RUNNING_STATES = {"QUEUED", "IN_PROGRESS", "PENDING", "REQUESTED", "WAITING", "EXPECTED"}
MAX_DIFF_CHARS = 60000

# ⚡ Bolt: Pre-compiled regex patterns to avoid recompilation on every scrub_sensitive_data call.
# Impact: Improves string processing performance in error reporting.
SENSITIVE_DATA_SCRUB_PATTERNS = (
(re.compile(r'(?i)(bearer\s+)[^\s"\'\\]+'), r'\1***'),
(re.compile(r'(?i)(token\s+)[^\s"\'\\]+'), r'\1***'),
(re.compile(r'(?i)\b(?:github_pat_[A-Za-z0-9_]+|gh[pousr]_[A-Za-z0-9_]+)\b'), '***'),
(re.compile(r'\b(sk-[A-Za-z0-9_-]+)'), '***'),
(re.compile(r'\b(xox[baprs]-[A-Za-z0-9-]+)'), '***'),
(re.compile(r'\b(AKIA[0-9A-Z]{16})'), '***'),
(re.compile(r'(?i)((?:api[_-]?key|access[_-]?token|refresh[_-]?token|id[_-]?token|client[_-]?secret|password|passwd|secret)\s*[:=]\s*)["\']?[^"\'\s]+["\']?'), r'\1***'),
)
Comment thread
Copilot marked this conversation as resolved.

def scrub_sensitive_data(text: str | None) -> str | None:
"""Mask sensitive tokens in text to prevent secret leakage."""
if not text:
return text
text = re.sub(r'(?i)(bearer\s+)[^\s"\'\\]+', r'\1***', text)
text = re.sub(r'(?i)(token\s+)[^\s"\'\\]+', r'\1***', text)
text = re.sub(r'(?i)\b(?:github_pat_[A-Za-z0-9_]+|gh[pousr]_[A-Za-z0-9_]+)\b', '***', text)
text = re.sub(r'\b(sk-[A-Za-z0-9_-]+)', '***', text)
text = re.sub(r'\b(xox[baprs]-[A-Za-z0-9-]+)', '***', text)
text = re.sub(r'\b(AKIA[0-9A-Z]{16})', '***', text)
text = re.sub(r'(?i)((?:api[_-]?key|access[_-]?token|refresh[_-]?token|id[_-]?token|client[_-]?secret|password|passwd|secret)\s*[:=]\s*)["\']?[^"\'\s]+["\']?', r'\1***', text)
for pattern, repl in SENSITIVE_DATA_SCRUB_PATTERNS:
text = pattern.sub(repl, text)
return text


Expand Down
Loading