open-telemetry / open-telemetry/opentelemetry-cpp
[resource_detectors] implementation of a scrub for sanitisation of sensitive data of process.command_args
Open
@nikhilbhatia08 is already working on this.
Since Sep 8, 2025.
Stale
triage/accepted
- Dominant language
- C++
- Stars
- 1.4k
- Forks
- 632
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 75
Description
As per the semconv we need to sanitize sensitive information of process.command_args and process.command_line. So one strategy could be that we could give user the control of doing that by giving the user to provide a list of args that the user wants to be scrubbed or hidden.
For example the command_args are : ["--PASS=some_value", "--ARG2=some_val", "--SECRET_KEY=secret"]
Then the user can provide a list what needs to be scrubbed: {"PASS", "SECRET_KEY"}
Then the user would get a list of : ["--PASS=*", "--ARG2=some_val", "--SECRET_KEY="]
How is this idea?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.