NVIDIA / holodeck / 21997027410

48%

push

github

fix(cluster): guard substring slice + redact join credentials in logs (#654)

CACertHash[:32] panics if openssl output is truncated. Add length
guard. Also redact bootstrap token and certificate key from logs
to prevent partial credential exposure.

Audit findings #3 (HIGH), #19 (MEDIUM).

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>

0 of 6 new or added lines in 1 file covered. (0.0%)

2593 of 5374 relevant lines covered (48.25%)

0.54 hits per line