feat: enhance config sanitization to mask sensitive keys in storage a… (#4119)

* feat: enhance config sanitization to mask sensitive keys in storage and session drivers

Fixes issue #4117

Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>

* fix: annotate test fixture tokens to suppress security linter warnings

Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>

* fix: update test fixture credentials to suppress security linter warnings

Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>

* fix: simplify slice value sanitization by removing unnecessary index handling

Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>

* fix: update RedisDB test to use a guaranteed-invalid endpoint for CI stability

Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>

* fix: update sanitization logic to handle empty credentials for event sinks

Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>

* fix: format sensitive config map keys for improved readability

Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>

---------

Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>
This commit is contained in:
Ramkumar Chinchani
2026-06-06 22:18:20 -07:00
committed by GitHub
parent 3ff9d6ddc1
commit 879fcee3c3
3 changed files with 167 additions and 6 deletions
+2 -2
View File
@@ -3191,10 +3191,10 @@ func TestCreateRedisDB(t *testing.T) {
})
Convey("Fails on Ping()", func() {
// Redis client will not be responding
// Use a guaranteed-invalid endpoint to avoid free-port races in CI.
cacheDriverParams := map[string]any{
"name": "redis",
"url": "redis://127.0.0.1:" + tCommon.GetFreePort(),
"url": "redis://127.0.0.1:0",
}
conf.Storage.CacheDriver = cacheDriverParams