You need to sign in or sign up before continuing.
Investigate & remove sensitive information from logs
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
See https://gitlab.com/gitlab-org/manage/import/backend/discussion/-/issues/9 for context
Sensitive information should not be included in logs or error messages.
Proposal
- Define (or find definitions of) sensitive information relevant to import / export
- E.g. tokens, API keys
- Identify how & where logging occurs during the import / export processes
- Identify how & where errors are presented to users during the import / export processes
- Review the above code to ensure sensitive information is not disclosed
- (If warranted and feasible) create rubocop rules to prevent info disclosure in the future
Edited by 🤖 GitLab Bot 🤖