fix(security): redact invalid workload identity access tokens - #2425

Merged

HAYDEN-OAI merged 5 commits into

mainfrom

autoimprove-workload-access-token-privacy-mt0pc2hu

Aug 20, 2026

Commits on Aug 19, 2026

fix(security): redact invalid workload identity access tokens
HAYDEN-OAI
committed
e7f6bf3
fix(auth): reject leading and trailing workload token whitespace
HAYDEN-OAI
committed
19186b4
fix(auth): validate one immutable workload token snapshot
HAYDEN-OAI
committed
7ef9e82

Commits on Aug 20, 2026

fix(auth): reject Bun-rewritten workload bearer credentials
HAYDEN-OAI
committed
7142b6e
test(bun): exercise workload bearer privacy in offline CI
HAYDEN-OAI
committed
43a5299