Poisoned Pipeline / Mitigations / M1301

M1301

Implement log sanitization

Configure log levels and verbosity to minimize the amount of sensitive information that is logged.
Set appropriate log levels to ensure that only necessary information is logged, and avoid logging sensitive data unless absolutely necessary.

Applies to

• T0130 Harvest secrets from logs
• T0162 Passwords in CI/CD logs
• T0192 Sensitive information in logs

References

• https://sematext.com/blog/logging-levels/