iceboundrock / iceboundrock/AutoForge
[AF-SEC-002] Redaction misses fine-grained PATs, Basic auth, JWTs and credentials in URLs
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 0
- Forks
- 0
- Avg merge
- 8h 56m
- Merged PRs (30d)
- 40
Description
Severity: LOW · Area: secrets / redaction
Problem
src/autoforge/redaction.py (~l.12–41) does not cover:
- fine-grained GitHub PATs (
github_pat_…), Authorization: Basic …,- JWTs (
eyJ…three-segment tokens), - credentials embedded in URLs (
https://x-access-token:…@github.com/…).
The README correctly labels redaction as defense in depth, so this is a gap rather than a broken promise.
Recommended fix
Add the four patterns and corresponding cases in tests/test_redaction.py.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in src/autoforge/redaction.py around lines 12–41, then review the related cases in tests/test_redaction.py. Add coverage for fine-grained GitHub PATs, Basic authorization, three-segment JWTs, and credentials embedded in URLs. Done means each pattern is redacted by the test suite.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 85/100