fix(sandbox): redact credential-shaped subprocess evidence - #842

Closed

seonghobae wants to merge 11 commits into

mainfrom

fix/sandbox-log-redaction-current-main-20260809

GitHub Advanced Security / gitleaks succeeded Aug 9, 2026 in 6s

4 new alerts

New alerts in code changed by this pull request

4 warnings

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 165 in tests/test_opencode_security_boundaries.py

Code scanning / Gitleaks

Identified a Private Key, which may compromise cryptographic security and sensitive data encryption. Warning test

private-key has detected secret for file tests/test_opencode_security_boundaries.py at commit 9d24ea60ac9a281b7ac9d855ad4c86e3b68db182.

Check warning on line 168 in tests/test_opencode_security_boundaries.py

Code scanning / Gitleaks

Identified a Private Key, which may compromise cryptographic security and sensitive data encryption. Warning test

private-key has detected secret for file tests/test_opencode_security_boundaries.py at commit 9d24ea60ac9a281b7ac9d855ad4c86e3b68db182.

Check warning on line 342 in tests/test_opencode_security_boundaries.py

Code scanning / Gitleaks

Detected a Generic API Key, potentially exposing access to various services and sensitive operations. Warning test

generic-api-key has detected secret for file tests/test_opencode_security_boundaries.py at commit 9d24ea60ac9a281b7ac9d855ad4c86e3b68db182.

Check warning on line 438 in tests/test_opencode_security_boundaries.py

Code scanning / Gitleaks

Detected a Generic API Key, potentially exposing access to various services and sensitive operations. Warning test

generic-api-key has detected secret for file tests/test_opencode_security_boundaries.py at commit 9d24ea60ac9a281b7ac9d855ad4c86e3b68db182.