Skip to content

Conversation

@jdach
Copy link
Contributor

@jdach jdach commented Mar 14, 2025

No description provided.

@github-actions
Copy link

run-unit-tests-and-coverage: Run #2570

Tests 📝 Passed ✅ Failed ❌ Skipped ⏭️ Pending ⏳ Other ❓ Flaky 🍂 Duration ⏱️
2019 2018 0 0 1 0 0 2m33s

🎉 All tests passed!

Github Test Reporter by CTRF 💚


try {
const summaryData = require('../../coverage/coverage-summary.json');
console.log('total: ', summaryData.total.lines.total, 'covered', summaryData.total.lines.total);

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [Bearer] <javascript_lang_logger_leak> reported by reviewdog 🐶

Leakage of information in logger message

Description

Information leakage through logger messages can compromise sensitive data. This vulnerability arises when dynamic data or variables, which may contain sensitive information, are included in log messages.

Remediations

  • Do not include sensitive data directly in logger messages. This can lead to the exposure of such data in log files, which might be accessible to unauthorized individuals.
    logger.info(`Results: ${data}`) // unsafe
  • Do use logging levels appropriately to control the verbosity of log output and minimize the risk of leaking sensitive information in production environments.

@github-actions
Copy link

Coverage: 0.9034749034749034

@jdach jdach closed this Mar 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants