apache/dolphinscheduler

[Feature][API] Logs support blocking database passwords or sensitive configurations such as S3/OSS access-key and secert-key

Open

#17,398 建立於 2025年8月6日

在 GitHub 查看
 (2 留言) (0 反應) (0 負責人)Java (11,659 star) (4,324 fork)batch import
featurehelp wantedpriority:middle

描述

Search before asking

  • I had searched in the issues and found no similar feature requirement.

Description

No response

Use case

No response

Related issues

No response

Are you willing to submit a PR?

  • Yes I am willing to submit a PR!

Code of Conduct

貢獻者指南

技術棧
java
領域
backendsecurity
議題類型
security
難度面向新貢獻者的預計實作難度，1 表示很小改動，5 表示專家級工作。
3
預計時間有經驗貢獻者完成調查、實作、測試並準備 pull request 的粗略時間範圍。
half day
活動狀態議題目前的可參與程度：新鮮、活躍、陳舊、阻塞或等待維護者輸入。
fresh
清晰度議題是否清楚說明預期改動、驗收標準和下一步。
needs investigation
前置要求
Javalogging framework (Logback/Log4j)
新手友善度1-100 的估計分數，表示該議題對首次貢獻者的友善程度。
40
研究方向
Investigate the current logging configuration in Apache DolphinScheduler, focusing on how database passwords and S3/OSS access keys are logged. Look for patterns where sensitive configuration values are printed without masking. Propose a solution such as adding a custom log filter or using placeholder replacement. Review the codebase for existing security practices. The issue has no maintainer response yet, so first confirm if this is a desired feature.