security-secrets-and-logging

Redaction utilities and safe logging practices prevent secrets and PII from leaking into application logs by sanitizing credentials, tokens, and user data before output generation. This skill provides guidance to enforce these protective measures across your codebase.

Environment-aware handling and access control provide the best way to manage secret storage across different environments. This skill offers secret management guidance to ensure credentials are validated and secured within codebases and CI/CD pipelines.

To implement redaction for sensitive data in CI/CD pipelines, enforce safe logging and input validation throughout the deployment process. This skill applies protective rules to prevent leakage of tokens and PII in runtime environments and pipeline outputs.

You can use this approach to check repository hygiene by applying recommendations for input validation and secret management. It helps identify and redact hidden credentials, ensuring sensitive data is not exposed in logs or stored improperly in codebases.

This safe logging guidance works for both codebases and runtime environments. It enforces redaction utilities and secure handling of PII across applications, CI/CD pipelines, and live deployments to prevent credential leakage.