Skip to content

Failure pattern tools leak across workspaces #28

@lukacf

Description

@lukacf

Problem

Failure patterns are listed globally with no workspace scoping. list_failure_patterns exposes patterns from other workspaces, including potentially sensitive symptom/root_cause strings.

Impact

Cross-workspace information leak by default.

Suggested Fix

Namespace patterns by workspace and/or redact or filter outputs based on requester context.

References

  • src/goldfish/server_tools/svs_tools.py list_failure_patterns
  • db failure_patterns.source_workspace

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions