87df32b64b
feat: 🔐 Jules02: Security hardening — dynamic secret masking ( #969 )
...
* feat: 🔐 Jules02: Security hardening — dynamic secret masking
- Implement dynamic secret discovery in SecretMaskingProcessor to automatically mask all SecretStr/SecretBytes fields.
- Enhance URL credential extraction to protect embedded passwords in connection strings (database, redis, etc).
- Refactor main.py to dynamically exclude sensitive fields from CLI output and audit snapshots.
- Add comprehensive tests for the new masking logic.
Co-authored-by: xnessom <255288032+xnessom@users.noreply.github.com >
* feat: 🔐 Jules02: Security hardening — dynamic secret masking
- Implement dynamic secret discovery in SecretMaskingProcessor to automatically mask all SecretStr/SecretBytes fields.
- Enhance URL credential extraction to protect embedded passwords in connection strings (database, redis, etc).
- Refactor main.py to dynamically exclude sensitive fields from CLI output and audit snapshots.
- Update SECURITY.md to reflect implemented hardening measures.
- Harmonize numpy version to 2.2.7 across all requirements to resolve CI dependency conflicts.
- Fix Ruff lint errors in log_config.py.
Co-authored-by: xnessom <255288032+xnessom@users.noreply.github.com >
---------
Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
Co-authored-by: xnessom <255288032+xnessom@users.noreply.github.com >
2026-05-10 02:26:14 +00:00
Leo and GitHub
cce67f6154
Enhance security policy with detailed reporting and scope
...
Expanded the security policy to include detailed reporting procedures, vulnerability scope, severity classification, and response SLOs. Added recommendations for maintaining security and outlined safe harbor provisions for researchers.
2026-05-01 17:43:24 +04:00
