Debug share credential redaction and hardening
NousResearch/hermes-agent · cluster 126129
Data as of
Nothing open on GitHub. Fix merged in #127207. Check it covers your case.
The short answer
- Known?
- Yes. 6 related items grouped here, 1 issue already closed.
- Fix event
- A fix was merged to main in PR #127207. Check it covers your case. No release data is tracked.
- Tracker
- The maintainers' tracker marks this
resolved, deciding PR #127207. That is separate from the fix event. - Still open
- Nothing open on GitHub.
A bug was identified where debug share uploads and the gateway /debug endpoint exposed sensitive credentials—including API keys, URL tokens, and passwords—unredacted. Multiple fixes address masking and hardening redaction at various points in the debug data pipeline.
Open issues0
Open PRs0
Fixes on record
-
#127207 fix(debug): redact fallback provider credentials in hermes dump, debug share and /debug
files:
agent/redact.py,hermes_cli/debug.py,hermes_cli/dump.py,tests/hermes_cli/test_debug.py,website/docs/reference/cli-commands.md,website/i18n/zh-Hans/docusaurus-plugin-content-docs/current/reference/cli-commands.md -
#127749 fix(debug): mask URL tokens and passwords in debug share uploads
files:
hermes_cli/debug.py,tests/hermes_cli/test_debug.py
3 PRs closed without merging
From the close comments: superseded by another PR 2 · done elsewhere 1
-
#126132 fix(debug): redact the system dump in debug share and gateway /debug · superseded by another PR →
#127207 -
#126168 fix(debug): harden dump redaction at upload boundary · superseded by another PR →
#127207 -
#127426 fix(debug): mask URL tokens and passwords in debug share uploads · done elsewhere →
#127749,#127207,#126129
Closed issues · 1
- Closed#126129[Bug]: debug share and gateway /debug include fallback_providers API keys from the dump unredacted
How this cluster was grouped
-
Link evidence (
structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference. -
Pairwise link density
0.33: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36.1.00means every pair is linked.
Pick up a Lab task
Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.
Open the Lab