🌐 US-Proxy
class="logged-out env-production page-responsive" style="word-wrap: break-word;" >
Skip to content

fix: redact env var values in agent debug manifest endpoint (#26904) - #27880

Merged
jdomeracki-coder merged 1 commit into
release/2.34from
backport/26904-to-2.34
Aug 6, 2026
Merged

fix: redact env var values in agent debug manifest endpoint (#26904)#27880
jdomeracki-coder merged 1 commit into
release/2.34from
backport/26904-to-2.34

Conversation

@jdomeracki-coder

Copy link
Copy Markdown
Contributor

Backport of #26904

Original PR: #26904 — fix: redact env var values in agent debug manifest endpoint
Merge commit: b33ff2d
Requested by: @jdomeracki-coder

Conflict resolution notes

The cherry-pick conflicted in agent/agent.go because the new
redactedManifestEnvValue constant landed where release/2.34 has the
HandleHTTPDebugLogs handler. Resolved by keeping both: the existing handler
and the new constant. The manifest env-redaction block applied cleanly. The
./agent/... package builds successfully.


Opened by Coder Agents on behalf of @jdomeracki-coder.

@jdomeracki-coder jdomeracki-coder added the backport/v2.34 Backport PR targeting release/2.34 label Aug 5, 2026
@coder-tasks

coder-tasks Bot commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Documentation Check

Updates Needed

  • docs/reference/agent-api/debug.md - The GET /debug/manifest section describes the returned manifest but does not mention that environment variable values are now redacted (replaced with ***REDACTED***, empty values preserved) in the response. Consider adding a > [!NOTE] noting that env var values are redacted for security while keys are preserved.

Automated review via Coder Agents

@jdomeracki-coder
jdomeracki-coder merged commit c15ae01 into release/2.34 Aug 6, 2026
48 checks passed
@jdomeracki-coder
jdomeracki-coder deleted the backport/26904-to-2.34 branch August 6, 2026 12:45
@github-actions github-actions Bot locked and limited conversation to collaborators Aug 6, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

backport/v2.34 Backport PR targeting release/2.34

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants