Merge commit from fork

* Fix secret redaction bypass via Nunjucks filters

* Address PR feedback on secret redaction helpers
This commit is contained in:
Ben Lambert
2026-03-04 07:24:40 +01:00
committed by GitHub
parent 545557a928
commit 30ff9810f5
3 changed files with 484 additions and 0 deletions
@@ -0,0 +1,5 @@
---
'@backstage/plugin-scaffolder-backend': patch
---
Fixed a security vulnerability where secrets could bypass log redaction when transformed through Nunjucks filters in scaffolder templates.