Skip to content

Conversation

@svalasovich
Copy link
Contributor

Fix Database Password leak in logs

When the sink connects to the database, it prints the full DSN including the password.
{"logger":"sink-sql.postgres","message":"connecting to db","dsn":"... password=... ", "logging.googleapis.com/labels":{}}
This exposes sensitive credentials in logs and can lead to a security breach.

This update logs non sensitive connection parameters only.

@svalasovich svalasovich changed the title fix: avoid logging database password fix: avoid logging database password and username Nov 19, 2025
@sduchesneau sduchesneau merged commit 557a32c into streamingfast:develop Nov 19, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants