ObservabilityData protection

observability/no-sensitive-logs

Detected log and telemetry calls must mask, allowlist, hash for disclosure control, or redact visibly sensitive emitted values.

loggingprivacyredaction

01 Examples

TypeScript

logger.info({ email, password }, "Login attempt");

Finding

Disallow sensitive values emitted without redaction.

02 Enable it

Setup

Install the package, register its plugin factory, then enable the rule.

pnpm add -D @scruple/observability

In scruple.config.ts, register the factory under the observability namespace used by the rule ID.

import { observability } from "@scruple/observability";

plugins: {
  "observability": observability(),
},

"observability/no-sensitive-logs": "warn"