Skip to content

feat: sensitive data northbound redaction #460

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
steiler wants to merge 8 commits into
base: main
Choose a base branch
from
Open

feat: sensitive data northbound redaction #460

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
55df2b2
feat: redact sensitive northbound values and persist sensitive paths
steiler Jun 10, 2026
7233d6b
chore(deps): pin goyang and sdc-protos to pre-merge commit pseudo-ver…
steiler Jun 10, 2026
e49b951
docs(prd): add sensitive-data PRD and issue index
steiler Jun 10, 2026
b2b09d8
Revert "docs(prd): add sensitive-data PRD and issue index"
steiler Jun 10, 2026
0d2bcf5
fix: satisfy golangci-lint on sensitive branch
steiler Jun 29, 2026
b28cbb8
fix: mock InstanceIntentGetAll in CreateDataStore tests
steiler Jun 29, 2026
315b525
fix: update xml_test.go call to ToXML to use XMLRenderOpts struct
steiler Jul 1, 2026
1a084d8
fix(ci): prevent grep no-match from aborting resolve-paired-refs
steiler Aug 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/cicd.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -147,7 +147,7 @@ jobs:
# Extract the PR number from a "Pairs-with: org/repo#NNN" line
pairs_with_pr() {
local repo="$1"
printf '%s' "$BODY" | grep -oP "(?i)Pairs-with:\s+${repo}#\K[0-9]+" | head -1
printf '%s' "$BODY" | grep -oP "(?i)Pairs-with:\s+${repo}#\K[0-9]+" | head -1 || true
}

# Resolve config-server: PR# → branch → full SHA (used as GHCR image tag)
Expand Down
8 changes: 8 additions & 0 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,14 @@ go 1.25.0

replace github.com/openconfig/goyang v1.6.0 => github.com/sdcio/goyang v1.6.2-2

// Pinned to open PRs; replace with tagged releases once merged:
// - sdcio/goyang PR#4: fix(ApplyDeviate): replace Exts on deviate replace, not append
// - sdcio/sdc-protos PR#123: feat(sensitive): schema.Path + LeafSchema.sensitive flag
replace (
github.com/sdcio/goyang v1.6.2-2 => github.com/sdcio/goyang v1.6.2-2.0.20260608121857-4668a077cf72
github.com/sdcio/sdc-protos v0.0.54 => github.com/sdcio/sdc-protos v0.0.55-0.20260610090020-aeb8edf494c4
)

require (
github.com/AlekSi/pointer v1.2.0
github.com/beevik/etree v1.6.0
Expand Down
4 changes: 2 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -191,8 +191,8 @@ github.com/sdcio/logger v0.0.3 h1:IFUbObObGry+S8lHGwOQKKRxJSuOphgRU/hxVhOdMOM=
github.com/sdcio/logger v0.0.3/go.mod h1:yWaOxK/G6vszjg8tKZiMqiEjlZouHsjFME4zSk+SAEA=
github.com/sdcio/schema-server v0.0.34 h1:NNDOkvtUMONtBA7cVvN96F+FWGD/Do6HNqfchy9B8eI=
github.com/sdcio/schema-server v0.0.34/go.mod h1:6t8HLXpqUqEJmE5yNZh29u/KZw0jlOICdNWns7zE4GE=
github.com/sdcio/sdc-protos v0.0.54 h1:1EbtU9ZbbJHFPOFGi5aW8Th79cuY9i+AJaP0ABVx8hw=
github.com/sdcio/sdc-protos v0.0.54/go.mod h1:YMLHbey0/aL1qtLW8csSYVPafsgnnn7aY54HkV5dbyQ=
github.com/sdcio/sdc-protos v0.0.55-0.20260610090020-aeb8edf494c4 h1:M1C1wzt2ni0fssvPEaMNPdHNKqTzBtT8VTT3/EzbrCE=
github.com/sdcio/sdc-protos v0.0.55-0.20260610090020-aeb8edf494c4/go.mod h1:NsvzvHnTonLcwQ/WNzxzBCauQmqxpuviaW0wh7Lkrts=
github.com/sdcio/yang-parser v0.0.12 h1:RSSeqfAOIsJx5Lno5u4/ezyOmQYUduQ22rBfU/mtpJ4=
github.com/sdcio/yang-parser v0.0.12/go.mod h1:CBqn3Miq85qmFVGHxHXHLluXkaIOsTzV06IM4DW6+D4=
github.com/sirikothe/gotextfsm v1.0.1-0.20200816110946-6aa2cfd355e4 h1:FHUL2HofYJuslFOQdy/JjjP36zxqIpd/dcoiwLMIs7k=
Expand Down
Loading
Loading