Skip to content

feat(secrets-scrubber): redact secrets from tool outputs#63

Open
cpacker wants to merge 1 commit into
mainfrom
feat/let-10106-secrets-scrubber
Open

feat(secrets-scrubber): redact secrets from tool outputs#63
cpacker wants to merge 1 commit into
mainfrom
feat/let-10106-secrets-scrubber

Conversation

@cpacker

@cpacker cpacker commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add an opt-in secrets-scrubber mod that combines the TruffleHog-derived secret-scan ruleset with contextual credential and authorization-header detection
  • redact secrets before tool results enter conversation history, including atomic rewrites of harness-owned overflow files and completion-gated background output files
  • fail closed on unsafe or unreadable output paths, document security boundaries and install ordering, and cover inline, overflow, symlink, and background-task behavior
  • track LET-10106

👾 Generated with Letta Code

@cpacker @letta-code
feat: add secrets scrubber mod
7c52ed6 
Redact detected credentials from tool results and harness-owned overflow files before they can persist in conversation history.

👾 Generated with [Letta Code](https://letta.com)

Co-Authored-By: Letta Code <noreply@letta.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cpacker