confidential-containers / trustee

Attestation and Secret Delivery Components
Apache License 2.0
67 stars 88 forks source link

kbs: Avoid logging sensitive information #575

Closed fidencio closed 6 days ago

fidencio commented 1 week ago

In a few parts of our code, we'd end up logging sensitive information when the KBS is running in "debug" mode.

A simple way to avoid doing that is taking advantage of the "derivative" crate, and simply omit the sensitive fields, which is the approach taken.