Poisoned Pipeline / Mitigations / M1300

M1300

Implement log sanitization

Implement log sanitization techniques that automatically remove or obfuscate sensitive information from logs, such as passwords, API keys, access tokens, or other types of credentials.
This can prevent sensitive information from being inadvertently logged in the first place.

Applies to

• T0130 Harvest secrets from logs
• T0162 Passwords in CI/CD logs
• T0192 Sensitive information in logs

References

• https://developer.harness.io/docs/first-gen/firstgen-platform/techref-category/techref-security/secrets-and-log-sanitization/