Repository navigation
Conversation
Bugbot is paused — on-demand spend limit reachedBugbot uses usage-based billing for this team and has hit its on-demand spend limit. A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue. |
|
Sentinel 已审核此变更，未发现需要报告的问题。 开发 agent 查询详情： 调用 MCP 工具 由 Sentinel 审核 · 目标提交 9f7744aebb35 |
Bugbot is paused — on-demand spend limit reachedBugbot uses usage-based billing for this team and has hit its on-demand spend limit. A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue. |
|
Sentinel 已审核此变更，并发现 1 个已核验问题。 另有 2 个需要人工确认的风险；黄色 advisory 不阻塞合并，建议开发 agent review advisory 评论并逐条确认。 开发 agent 查询详情： 调用 MCP 工具 由 Sentinel 审核 · 目标提交 e808ed33a78b |
|
Sentinel 保留了 2 个尚未确认的审核候选。这些黄色条目不阻塞合并；红色 P0/P1 与其他独立硬门禁不受影响。 单一猜测、缺少变更行证据或纯 checklist 的候选会统一降为 P3。
需要完整证据时，可用行末 由 Sentinel 审核 · 目标提交 e808ed33a78b |
![evomap-aiqa-bot[bot]](https://avatars.githubusercontent.com/u/278697308?s=60&v=4){kind=small}
| const JSON_SECRET_PATTERNS = [ | ||
| /("(?:api[_-]?key|secret|token|passw(?:or)?d|pwd|access[_-]?key|private[_-]?key|client[_-]?secret)"\s*:\s*")(?:\\[^\r\n]|[^"\\\r\n])+(")/gi, | ||
| // Match camelCase suffixes without treating words like "monkey" as credentials. | ||
| /("[A-Za-z][A-Za-z0-9_-]*(?:Key|Token|Secret|Password|Passwd|Pwd|Credentials?)"\s*:\s*")(?:\\[^\r\n]|[^"\\\r\n])+(")/g, |
There was a problem hiding this comment.
任意 *Key 字段都会被当作秘密，破坏普通任务上下文
🟠 严重程度：中（P2）
camelCase 正则无条件匹配所有以 Key 结尾的 JSON 键，因此 primaryKey、foreignKey、partitionKey、sortKey、cacheKey、objectKey 等普通标识字段都会被替换为 [redacted]。仅验证小写 monkey 并不能覆盖这些常见良性字段。
Finding：finding_f328919c91f59a1f6af8267c
Summary
Redact quoted credential values before recall and distillation. Preserve JSON syntax and unrelated fields.
Evidence
Merge Danger
Door: Two-way
Blast Radius: Credential filtering