fix(telemetry): scrub existing rows, and stop --author= being eaten (#3925)
This commit is contained in:
@@ -86,7 +86,10 @@ _SECRET_PATTERNS: tuple[tuple[str, "re.Pattern[str]"], ...] = (
|
||||
# be anything.
|
||||
("assigned", re.compile(
|
||||
r"(?i)\b([A-Za-z0-9_]*"
|
||||
r"(?:token|secret|password|passwd|api[_-]?key|access[_-]?key|auth)"
|
||||
# NO BARE "auth" HERE. It matched `--author=`, so a commit naming an
|
||||
# address redacted the address — evidence eaten for a word that only
|
||||
# LOOKS credential-shaped. `AUTH_TOKEN` is still caught, by `token`.
|
||||
r"(?:token|secret|password|passwd|api[_-]?key|access[_-]?key)"
|
||||
r"[A-Za-z0-9_]*)"
|
||||
r"(\s*[:=]\s*[\"']?)"
|
||||
r"([^\s\"'&]{8,})"
|
||||
|
||||
Reference in New Issue
Block a user