Skip to content

KC-1434: Mask secrets consistently in service-mode command logs - #2320

Merged
craiglurey merged 1 commit into
releasefrom
fix/service-log-secret-masking
Aug 25, 2026
Merged

KC-1434: Mask secrets consistently in service-mode command logs#2320
craiglurey merged 1 commit into
releasefrom
fix/service-log-secret-masking

Conversation

@amangalampalli-ks

Copy link
Copy Markdown
Contributor

Summary

Secrets in service-mode command logs (passwords, TOTP codes, private keys, payment/bank data, etc.) were inconsistently masked. This fixes it so they're always hidden.

Changes

  • Mask TOTP codes, private keys, passphrases, payment cards, bank accounts, and security answers
  • Mask secrets even when set with a custom field label, not just the default name
  • Apply masking to every log line that prints a command - previously only one of several did

@amangalampalli-ks amangalampalli-ks self-assigned this Aug 25, 2026
@amangalampalli-ks
amangalampalli-ks force-pushed the fix/service-log-secret-masking branch from e131cdf to d946859 Compare August 25, 2026 13:34
@amangalampalli-ks
amangalampalli-ks marked this pull request as ready for review August 25, 2026 13:39
@craiglurey
craiglurey merged commit ba06a48 into release Aug 25, 2026
4 checks passed
@sk-keeper
sk-keeper deleted the fix/service-log-secret-masking branch August 25, 2026 14:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants