YOMXXX c599f47ba4 fix(redact): cover GitHub fine-grained PATs and Google API keys (#4678) ...

The primary server redactor now covers github_pat_ and standard AIza keys, but the client transcript safety net does not. Add matching client patterns and regression coverage so previously stored or otherwise unredacted transcript values are masked at display time.

Also make the fixed-length Google key rule redact a key ending in '-' while preserving its trailing delimiter. Keep the 39-character format exact to avoid broadening false positives.

Co-authored-by: multica-agent <github@multica.ai>

2026-07-15 16:06:59 +08:00

4.6 KiB

Raw Permalink Blame History

View Raw