Ashwin Bhat 0aee57ab82

Redact common credential patterns from published run output (#1595) ...

* Redact common credential patterns from published run output

* Handle color codes and escape sequences ahead of redacted values

Vendor-prefixed formats no longer require a leading word boundary, so a
value that follows an ANSI SGR terminator or a serialized JSON escape is
still matched. AWS key ids keep a boundary but also accept those cases.
sanitizeContent goes back to GitHub-only redaction for inbound content,
and the failure annotation is redacted like the tracking comment.

* Coerce non-string text content before redacting tool results

No-Verification-Needed: one-line coercion in a formatting helper plus regression test

2026-08-06 10:17:25 -07:00

..

cleanup-ssh-signing.ts

feat: add ssh_signing_key input for SSH commit signing (#784)

2026-01-02 10:37:25 -08:00

collect-inputs.ts

Add Workload Identity Federation (OIDC) authentication support (#1338)

2026-05-21 15:19:15 -07:00

format-turns.ts

Redact common credential patterns from published run output (#1595)

2026-08-06 10:17:25 -07:00

post-buffered-inline-comments.ts

feat(inline-comment): add confirmed param + probe-pattern safety net (#1048)

2026-03-12 00:12:55 -07:00

prepare.ts

Check collaborator permissions for workflow_run events (#1590)

2026-08-04 10:05:34 -07:00

run.ts

Redact common credential patterns from published run output (#1595)

2026-08-06 10:17:25 -07:00

update-comment-link.ts

fix: fall back to repo default_branch instead of hardcoded "main" (#1143)

2026-04-01 14:48:46 -07:00