Add pillar_mask_output config option and fix full-value pillar masking#69812

Open

Akm0d wants to merge 5 commits into

saltstack:3008.xfrom

Akm0d:VCOPS-98852-pillar-mask-full-values

Commits on Jul 15, 2026

Add pillar_mask_output config option and fix full-value pillar masking

Akm0d
and
claude
committed
Replace pillar_mask_output global killswitch with explicit opts reads

Akm0d
and
claude
committed

Commits on Jul 16, 2026

Narrow pillar_mask_output to only change pillar.items()'s default

Akm0d
and
claude
committed

Commits on Jul 20, 2026

Redact name under no_log and scan for pillar secrets regardless of no_log
Akm0d
committed

Commits on Jul 21, 2026

Fix CI tests broken by full-value pillar masking and literal-secret scanning
Akm0d
committed