fix(telemetry): scrub existing rows, and stop --author= being eaten (#3925)

This commit is contained in:
2026-09-11 15:43:31 -04:00
parent bfa2d419f9
commit 18e3cf9f2f
3 changed files with 115 additions and 1 deletions
+4 -1
View File
@@ -86,7 +86,10 @@ _SECRET_PATTERNS: tuple[tuple[str, "re.Pattern[str]"], ...] = (
# be anything.
("assigned", re.compile(
r"(?i)\b([A-Za-z0-9_]*"
r"(?:token|secret|password|passwd|api[_-]?key|access[_-]?key|auth)"
# NO BARE "auth" HERE. It matched `--author=`, so a commit naming an
# address redacted the address — evidence eaten for a word that only
# LOOKS credential-shaped. `AUTH_TOKEN` is still caught, by `token`.
r"(?:token|secret|password|passwd|api[_-]?key|access[_-]?key)"
r"[A-Za-z0-9_]*)"
r"(\s*[:=]\s*[\"']?)"
r"([^\s\"'&]{8,})"