Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
gh-aw
Public
Notifications
You must be signed in to change notification settings
Fork
498
Star
5k
Code
Issues
381
Pull requests
12
Discussions
Actions
Projects
Wiki
Security and quality
7
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Wiki
Security and quality
Insights
Keep safe-output token placeholders out of runtime config.json
- #36353
#36353
Merged
pelikhan
merged 12 commits into
main
github/gh-aw:main
from
copilot/fix-secrets-exposure-issue
github/gh-aw:copilot/fix-secrets-exposure-issue
Copy head branch name to clipboard
Jun 2, 2026
Conversation
Commits
12
(12)
Checks
Findings
Files changed
Merged
Keep safe-output token placeholders out of runtime config.json
#36353
pelikhan
merged 12 commits into
main
github/gh-aw:main
from
copilot/fix-secrets-exposure-issue
github/gh-aw:copilot/fix-secrets-exposure-issue
Copy head branch name to clipboard
Commits
Commits on Jun 1, 2026
Initial plan
Copilot
authored
b2d44cb
View commit details
Copy full SHA for b2d44cb
Browse repository at this point
fix: keep safe-output config placeholders off disk
Show description for 1131de2
Copilot
and
pelikhan
authored
1131de2
View commit details
Copy full SHA for 1131de2
Browse repository at this point
test: tighten safe-output placeholder coverage
Show description for 5bbf951
Copilot
and
pelikhan
authored
5bbf951
View commit details
Copy full SHA for 5bbf951
Browse repository at this point
test: relax safe-output env count assertions
Show description for a348be5
Copilot
and
pelikhan
authored
a348be5
View commit details
Copy full SHA for a348be5
Browse repository at this point
Merge branch 'main' into copilot/fix-secrets-exposure-issue
pelikhan
authored
cc4ef74
View commit details
Copy full SHA for cc4ef74
Browse repository at this point
docs: add draft ADR for safe-output secret placeholder handling
Show description for f0cc4b3
github-actions[bot]
and
claude
authored
f0cc4b3
View commit details
Copy full SHA for f0cc4b3
Browse repository at this point
chore: plan for addressing PR review feedback
Show description for c26d768
Copilot
and
pelikhan
authored
c26d768
View commit details
Copy full SHA for c26d768
Browse repository at this point
fix: namespace secret env vars and extract shared redact helper
Show description for 608e4aa
Copilot
and
pelikhan
authored
608e4aa
View commit details
Copy full SHA for 608e4aa
Browse repository at this point
docs: improve inline documentation for secret env prefix and redact helper
Show description for bf80cee
Copilot
and
pelikhan
authored
bf80cee
View commit details
Copy full SHA for bf80cee
Browse repository at this point
fix: add safe_outputs_config_redact.cjs to deployment list
Show description for ea9db61
Copilot
and
pelikhan
authored
ea9db61
View commit details
Copy full SHA for ea9db61
Browse repository at this point
fix: add safe_outputs_config_redact.cjs to deployment and required deps lists
Show description for e301e41
Copilot
and
pelikhan
authored
e301e41
View commit details
Copy full SHA for e301e41
Browse repository at this point
Commits on Jun 2, 2026
style: fix Prettier formatting in safe_outputs_config_redact.cjs and safe_outputs_config.test.cjs
Show description for fc95bbe
Copilot
and
pelikhan
authored
fc95bbe
View commit details
Copy full SHA for fc95bbe
Browse repository at this point
You can’t perform that action at this time.