Skip to content

Avoid logging legacy normalization report data - #20

Merged
Codewriter90x merged 1 commit into
mainfrom
agent/codeql-cleartext-log-fix
Jul 30, 2026
Merged

Avoid logging legacy normalization report data#20
Codewriter90x merged 1 commit into
mainfrom
agent/codeql-cleartext-log-fix

Conversation

@Codewriter90x

Copy link
Copy Markdown
Owner

Security finding

CodeQL alert #1 (HIGH) reported clear-text logging of data derived from the legacy input at scripts/normalize_legacy.py:315.

Fix

  • keep the detailed normalization report in its requested file
  • replace the full stdout JSON dump with a fixed completion message
  • add a subprocess regression test proving report keys and legacy identifiers are not printed

Verification

  • focused regression test: passed
  • Python tests: 41 passed
  • Node tests: 8 passed
  • Ruff and mypy: passed

The released data assets are unaffected; this changes only command-line logging.

@Codewriter90x
Codewriter90x merged commit 05af80d into main Jul 30, 2026
13 checks passed
@Codewriter90x
Codewriter90x deleted the agent/codeql-cleartext-log-fix branch July 30, 2026 09:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant