fix(audit): keep personal data and credentials out of audit events

Anonymize the audit events of a deleted user, store only the ID and
name of other users, and drop the metadata copy of actor_email.
Store URLs without query strings, registries without user info, and
the exception class instead of raw SSH errors.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Andras Bacsai
2026-11-06 09:31:44 +01:00
co-authored by Claude Opus 5.5
parent b7d0e6be2a
commit 3379fa448a
14 changed files with 129 additions and 38 deletions
-1
View File
@@ -279,7 +279,6 @@ class Controller extends BaseController
'already_member' => $alreadyMember,
'member_id' => $user->id,
'member_name' => $user->name,
'member_email' => $user->email,
'actor_id' => $user->id,
'actor_name' => $user->name,
'actor_email' => $user->email,