security: strip credentials from migration snapshots and enforce blueprint digest#156

Closed

gn00295120 wants to merge 6 commits intoNVIDIA:mainfrom

gn00295120:security/sandbox-credential-exposure-and-blueprint-bypass

Commits on Mar 22, 2026

security: strip credentials from migration snapshots
gn00295120
committed
chore: add security to commitlint allowed types
gn00295120
committed
fix: harden walkAndRemoveFile error handling in credential sanitization
gn00295120
committed
fix: strip credential fields from config files in external root snapshots
gn00295120
committed
fix: harden credential sanitization with pattern matching, JSON5 and symlink guards
gn00295120
committed
fix: add missing docstrings to resolve lint coverage failure
gn00295120
committed