sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 79 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

[high] gdpr-patterns: PII data potentially logged #35

New Issue
Closed
opened 2026-03-18 16:01:24 +00:00 by sharang · 1 comment
sharang commented 2026-03-18 16:01:24 +00:00
Owner
Copy Link
Copy Source

high Finding

Scanner: gdpr-patterns
Severity: high
Rule: gdpr-pii-logging

Description

Logging statements that may contain personally identifiable information (email, SSN, phone, IP address).

Location

File: compliance-agent/src/pipeline/patterns.rs (line 290)

Code

        assert!(pattern.pattern.is_match("print(phone_number)"));

Fingerprint: 08ebc250273589d4c4eeaf773486650b4f6a4ef1a54fa9cbf1444f4b2e31e018
Generated by compliance-scanner

Labels: severity:high, scanner:gdpr-patterns, compliance-scanner

## high Finding **Scanner:** gdpr-patterns **Severity:** high **Rule:** gdpr-pii-logging ### Description Logging statements that may contain personally identifiable information (email, SSN, phone, IP address). ### Location **File:** `compliance-agent/src/pipeline/patterns.rs` (line 290) ### Code ``` assert!(pattern.pattern.is_match("print(phone_number)")); ``` --- *Fingerprint:* `08ebc250273589d4c4eeaf773486650b4f6a4ef1a54fa9cbf1444f4b2e31e018` *Generated by compliance-scanner* **Labels:** severity:high, scanner:gdpr-patterns, compliance-scanner
sharang commented 2026-07-10 07:51:57 +00:00
Author
Owner
Copy Link
Copy Source

Closing as false positive: this finding points at the scanner's own pattern unit tests in compliance-agent/src/pipeline/patterns.rs (test assertions like is_match(...) containing the trigger strings). Not real PII/OAuth issues. Long-term fix: exclude test modules / self-repo pattern fixtures from scans.

Closing as false positive: this finding points at the scanner's own pattern unit tests in `compliance-agent/src/pipeline/patterns.rs` (test assertions like `is_match(...)` containing the trigger strings). Not real PII/OAuth issues. Long-term fix: exclude test modules / self-repo pattern fixtures from scans.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
P0-demo
CERTifAI P0 demo build tickets (CS-*)
 bug
critical
enhancement
epic
Tracking issue spanning multiple sub-issues
 high
infrastructure
onboarding
Multi-target onboarding wizard redesign
 performance
security
v0.3.0
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
Benjamin_Boenisch sharang (Sharang Parnerkar)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#35