Redact secrets from startup error logs #4

Merged
magnus merged 1 commits from fix/redact-startup-errors into main 2026-09-18 15:10:34 +00:00
Owner

Integrant includes component configuration in exception data. The first deployment exposed runtime configuration in pod logs while prerequisites were corrected. Log only exception class and message in the default uncaught handler so future startup failures cannot print database or cookie secrets.

Verified with the PostgreSQL-backed Clojure test suite and cljstyle. Rollback is a revert, but restoring full exception-object logging would reintroduce secret disclosure.

Integrant includes component configuration in exception data. The first deployment exposed runtime configuration in pod logs while prerequisites were corrected. Log only exception class and message in the default uncaught handler so future startup failures cannot print database or cookie secrets. Verified with the PostgreSQL-backed Clojure test suite and cljstyle. Rollback is a revert, but restoring full exception-object logging would reintroduce secret disclosure.
magnus added 1 commit 2026-09-18 15:09:00 +00:00
Redact secrets from startup error logs
pull-request / validate (pull_request) Successful in 1m27s
d2fc39422a
magnus merged commit 882963615d into main 2026-09-18 15:10:34 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: magnus/elprice#4