Copilot · GitHub

Copilot AI linked an issue

Aug 6, 2026

that may be closed by this pull request

Closed

- parse_copilot_log.cjs: disable includeDetailedParameters to stop rendering
  raw tool inputs/outputs in step summaries
- safe_output_summary.cjs: remove body preview (message.body/result.body),
  message.data rendering, and raw JSON.stringify(message) from error path
  to prevent secret leakage into step summaries
- Update tests to reflect new security-safe behavior and add sentinel
  secret exclusion tests covering body, data, error, multiline, URL, and
  base64-encoded shapes
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title [WIP] Sanitize secret-bearing data in GitHub step summaries fix: sanitize secret-bearing data before writing GitHub step summaries

Aug 6, 2026

@pelikhan

pelikhan marked this pull request as ready for review

August 6, 2026 05:45

Copilot AI balanced review requested due to automatic review settings

August 6, 2026 05:45

@pelikhan

Closed

Closed

…mmaries
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

@pelikhan

@pelikhan

pelikhan deleted the copilot/sanitize-secret-bearing-data branch

August 6, 2026 06:34

Read the original on github.com ↗