Skip to content

Add $md.sensitive tag#215

Merged
chrisghill merged 1 commit intomainfrom
patch/add-md.sensitive-tag
Jan 26, 2026
Merged

Add $md.sensitive tag#215
chrisghill merged 1 commit intomainfrom
patch/add-md.sensitive-tag

Conversation

@chrisghill
Copy link
Copy Markdown
Member

No description provided.

@chrisghill chrisghill changed the title Add .sensitive tag Add $md.sensitive tag Jan 9, 2026
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request adds the $md.sensitive metadata tag to sensitive authentication fields across multiple JSON schema definition files to prevent accidental exposure of credentials in logs, UI displays, or other outputs.

  • Marks password, API key, token, and private key fields as sensitive
  • Ensures consistent security practices across authentication schemas
  • Covers both type definitions and artifact authentication schemas

Reviewed changes

Copilot reviewed 16 out of 16 changed files in this pull request and generated no comments.

Show a summary per file
File Description
definitions/types/ssh-authentication.json Marks private_key field as sensitive
definitions/types/rabbitmq-authentication.json Marks password field as sensitive
definitions/types/qdrant-authentication.json Marks api_key field as sensitive
definitions/types/mongo-authentication.json Marks password field as sensitive
definitions/types/kafka-authentication.json Marks both connection string fields as sensitive
definitions/types/elasticsearch-authentication.json Marks password field as sensitive
definitions/types/cosmosdb-sql-authentication.json Marks password field as sensitive
definitions/artifacts/redis-authentication.json Marks password field as sensitive
definitions/artifacts/postgresql-authentication.json Marks password field as sensitive
definitions/artifacts/opensearch-authentication.json Marks password field as sensitive
definitions/artifacts/mysql-authentication.json Marks password field as sensitive
definitions/artifacts/mssql-authentication.json Marks password field as sensitive
definitions/artifacts/kubernetes-cluster.json Marks bearer token field as sensitive
definitions/artifacts/gcp-service-account.json Marks private_key field as sensitive
definitions/artifacts/gcp-firebase-authentication.json Marks apiKey field as sensitive
definitions/artifacts/azure-service-principal.json Marks client_secret field as sensitive

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@chrisghill chrisghill merged commit 7d161d8 into main Jan 26, 2026
7 checks passed
@chrisghill chrisghill deleted the patch/add-md.sensitive-tag branch January 26, 2026 23:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants