Skip to content

Investigate & remove sensitive information from logs

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

See https://gitlab.com/gitlab-org/manage/import/backend/discussion/-/issues/9 for context

Sensitive information should not be included in logs or error messages.

Proposal

  • Define (or find definitions of) sensitive information relevant to import / export
    • E.g. tokens, API keys
  • Identify how & where logging occurs during the import / export processes
  • Identify how & where errors are presented to users during the import / export processes
  • Review the above code to ensure sensitive information is not disclosed
  • (If warranted and feasible) create rubocop rules to prevent info disclosure in the future
Edited by 🤖 GitLab Bot 🤖