apache/dolphinscheduler

[Feature][API] Logs support blocking database passwords or sensitive configurations such as S3/OSS access-key and secert-key

Open

#17,398 opened on Aug 6, 2025

View on GitHub
 (3 comments) (0 reactions) (0 assignees)Java (4,324 forks)batch import
featurehelp wantedpriority:middle

Repository metrics

Stars
 (11,659 stars)
PR merge metrics
 (Avg merge 1d 17h) (22 merged PRs in 30d)

Description

Search before asking

  • I had searched in the issues and found no similar feature requirement.

Description

No response

Use case

No response

Related issues

No response

Are you willing to submit a PR?

  • Yes I am willing to submit a PR!

Code of Conduct

Contributor guide

Research direction
Investigate current logging implementations in DolphinScheduler to identify where sensitive data (like database passwords, S3/OSS access keys) might be logged. Propose a mechanism to filter or mask such data before logging, e.g., using a custom log filter or annotation based redaction. Check existing security configurations and discuss with maintainers for approach alignment.
Tech stack
java
Domain
securitybackend
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Mostly clear
Prerequisites
JavaLogging frameworks
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
50