Skip to content

fix(security): harden saved-credential, proxy egress, and keyless-mint paths from the release audit - #9865

Merged
waleedlatif1 merged 4 commits into
stagingfrom
fix/release-audit-hardening
Nov 11, 2026
Merged

waleedlatif1 merged 4 commits into
stagingfrom
fix/release-audit-hardening

fix(security): stop queued Twilio recordings fetches on cancel, type …

d3772f3
Select commit
Loading
Failed to load commit list.
ParameterAI / Parameter Secret Detection completed Nov 11, 2026 in 0s

4 potential secret(s) detected

Parameter Secret Detection found 4 potential secret(s) in this change.

Value Type Location Status
redi******************** Redis URI Connection String apps/sim/tools/generated/tool-metadata.ts:6 Unverified — no live check available for this secret type
http******************** URI with Username and Secret apps/sim/lib/core/network/environment-proxy.server.test.ts:133 Unverified — no live check available for this secret type
http******************** URI with Username and Secret apps/sim/lib/core/network/environment-proxy.server.test.ts:134 Unverified — no live check available for this secret type
http******************** URI with Username and Secret apps/docs/content/docs/platform/self-hosting/networking.mdx:297 Unverified — no live check available for this secret type

Remediation: rotate the credential(s), then move replacements to a secrets manager. Rewriting git history is not sufficient.