NVIDIA / holodeck / 21963027256

46%

main: 48%

push

github

fix(cluster): guard substring slice + redact join credentials in logs

CACertHash[:32] panics if openssl output is truncated. Add length
guard. Also redact bootstrap token and certificate key from logs
to prevent partial credential exposure.

Audit findings #3 (HIGH), #19 (MEDIUM).

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>

0 of 6 new or added lines in 1 file covered. (0.0%)

2289 of 4989 relevant lines covered (45.88%)

0.51 hits per line