{"repo":"NousResearch/hermes-agent","public_id":"129165","display_label":"Secret values missing from redaction in env output","summary":"A bug where secret-source values were not registered for exact-value redaction, causing them to potentially leak through line-processed output. The members cover the problem report and corresponding fixes.","subsystem":"agent","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":3,"closed_issues":0,"merged_prs":0,"attempt_prs":3},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[],"members":[{"kind":"issue","number":129165,"title":"Secret-source values aren't registered for exact-value redaction, so multi-line secrets leak through line-processed `env` output","url":null,"state":"open"},{"kind":"pr","number":129166,"title":"fix(security): register secret-source values for redaction","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"d9bb9dc9f50704194ff003796d3c4e9d5b0693fe","number":0},{"kind":"commit","value":"f42f579cf8bac4918ac9599bece71618afadd846","number":0},{"kind":"commit","value":"7239625ae1b786827c952a8ace41fa6fd7f2eec5","number":0}],"category":"partial_fix","implication":"needs_llm"},"merged":false},{"kind":"pr","number":129169,"title":"fix(redact): register applied secret-source values for exact-value redaction","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#136875","number":136875}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":136875,"title":"Private key lines stay redacted when only part of the key is printed (#129165, salvage #129169 + #129166)","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"0058021a9dfac2bd65bc3b1e8fa0785a46d03974","number":0}],"category":"partial_fix","implication":"needs_llm"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}