Skip to content

[FEATURE]: secrets redaction at tool output boundary #32183

Closed as not planned
Closed as not planned

Description

@MethodWhite
  • I have verified this feature I'm about to request hasn't been suggested before.

Tool output often contains API keys, tokens, and passwords that flow verbatim to the LLM and session history. A redaction layer at the tool output boundary would detect and redact secrets before they reach the model or get persisted.

Spec: https://github.com/MethodWhite/opencode/blob/spec-secrets-redaction/specs/secrets-redaction.md

Two detection strategies: pattern matching (ghp_, sk-, AKIA, etc.) and entropy scanning for unknown high-entropy tokens. Redacted values keep their prefix and structure so the model can still reason about credential usage without seeing the value. Session history and share links only store redacted content.

Activity

  1. github-actions commented on Jun 13, 2026

    @github-actions
    Contributor

    This issue doesn't fully meet our contributing guidelines.

    What needs to be fixed:

    • Feature requests must use the [FEATURE]: title prefix (e.g., [FEATURE]: secrets redaction at tool output boundary)
    • The feature request template requires a verification checkbox confirming you have searched for existing similar requests before submitting

    Please edit this issue to address the above within 2 hours, or it will be automatically closed.


    This issue might be a duplicate of existing issues. Please check:

    If you believe this was flagged incorrectly, please let a maintainer know.

  2. changed the title [-]feat: secrets redaction at tool output boundary[/-] [+][FEATURE]: secrets redaction at tool output boundary[/+] on Jun 13, 2026
  3. github-actions commented on Jun 13, 2026

    @github-actions
    Contributor

    Thanks for updating the issue! It now meets the contributing guidelines — the title prefix, verification checkbox, and description are all in order. Removing the compliance flag.

  4. MethodWhite commented on Jun 13, 2026

    @MethodWhite
    Author
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions