breken-ai cb1016c405 fix(terraform): redact the value paired with a secret-named name in name/value lists ...

The ECS environment idiom { name = "DB_PASSWORD", value = "hunter2" } names the
secret in the name literal, not in a key, so key-name redaction let the value
reach graph.json and the MCP surface verbatim. When a map's name literal
matches the sensitive pattern, redact its value/valueFrom.

Fixes #3787

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
(cherry picked from commit e11cf947d0)

2026-09-27 18:39:51 +01:00

..

fixtures

feat: add Erlang language extractor

2026-09-21 19:19:26 +01:00

__init__.py

…

bench_extract.py

…

bench_query_scoring.py

…

conftest.py

…

test_affected_cli.py

…

test_affected_member_seed.py

…

test_agents_platform.py

…

test_analyze.py

…

test_anthropic_custom_endpoint.py

…

test_antigravity_install.py

…

test_apm_fallback_version.py

…

test_architecture_doc.py

…

test_astro_extraction.py

…

test_astro_import_ids.py

…

test_atomic_canvas_export.py

…

test_atomic_version_stamp.py

…

test_atomic_writes.py

…

test_backend_env_isolation.py

…

test_backend_extras.py

release: 0.9.61 — fix Python 3.12/3.13 breakage from 0.9.60

2026-09-12 22:23:00 +01:00

test_benchmark_raw_graph.py

…

test_benchmark.py

…

test_build_merge_dedup_scope.py

…

test_build_merge_hyperedges_and_prune.py

fix(build): fall back from stale graphify root

2026-09-22 17:30:28 +01:00

test_build_merge_shrink_guard.py

…

test_build.py

fix: complete the Solidity/method-ghost/Erlang review items (#3716, #3719, #3714 follow-ups)

2026-09-21 19:44:17 +01:00

test_builtin_global_type_refs.py

…

test_cache.py

…

test_callflow_html.py

…

test_cargo_introspect.py

fix(cargo): resolve inherited workspace dependency identity

2026-09-22 15:00:07 +01:00

test_cargo_missing_manifest.py

Add regression tests for cargo extraction with a missing manifest

2026-09-22 14:58:22 +01:00

test_carried_hyperedge_remap.py

…

test_case_sensitive_resolution.py

…

test_charmap_encoding.py

…

test_chunking.py

…

test_cjs_module_extension.py

…

test_claude_cli_backend.py

…

test_claude_md.py

…

test_cli_broken_pipe.py

…

test_cli_export.py

Compare partition structure, not just the node id set, for staleness

2026-09-17 11:01:38 +01:00

test_cli_help.py

…

test_cluster.py

test(cluster): add the self-loop cohesion_score regressions #3558 described

2026-09-14 18:55:31 +01:00

test_cobol_extractor.py

fix(cobol): link both endpoints of a PERFORM ... THRU range

2026-09-25 15:44:08 +01:00

test_codebuddy.py

…

test_community_hub_labels.py

…

test_community_labels_skill.py

…

test_confidence.py

…

test_corrupt_graph_json.py

…

test_cpp_nested_and_cli.py

…

test_cpp_objc_cross_file_calls.py

Add a regression test for the god node guard on the fallback

2026-09-17 11:03:41 +01:00

test_cpp_preprocess.py

…

test_cross_extension_reexport_self_cycle.py

…

test_cross_language_call_resolution.py

…

test_cross_repo_external_call_guards.py

fix(merge): respect C# type visibility across repos

2026-09-13 17:47:56 +01:00

test_cross_repo_member_calls.py

…

test_cross_repo_shared_types.py

…

test_csharp_call_site_generic_args.py

…

test_csharp_enum_members.py

…

test_csharp_field_generic_args.py

…

test_csharp_generic_callsites.py

…

test_csharp_interface_dispatch.py

…

test_csharp_member_calls.py

…

test_csharp_member_nodes.py

…

test_csharp_object_creation.py

…

test_csharp_partial_classes.py

…

test_csharp_type_resolution.py

fix: prevent C# member nodes from being resolved as types

2026-09-25 16:01:47 +01:00

test_dart.py

…

test_dedup_remaps_hyperedges.py

…

test_dedup_survivor_richness.py

Add a regression test for the stray source_location gate

2026-09-25 16:01:47 +01:00

test_dedup.py

fix(dedup): preserve pre-existing self-loops during entity deduplication

2026-09-26 13:53:08 +01:00

test_definition_file_portability.py

…

test_detect.py

Add a regression test for foreign platform absolute key detection

2026-09-26 13:53:08 +01:00

test_devin.py

…

test_dotnet.py

…

test_duplicate_annotation_edges.py

…

test_elixir_import_resolution.py

fix(elixir): guard nested-module capture and same-file contains clobber (#3603 follow-up)

2026-09-16 15:37:30 +01:00

test_erlang_extractor.py

feat: add Erlang language extractor

2026-09-21 19:19:26 +01:00

test_evidence_binding.py

…

test_explain_cli.py

…

test_export_control_characters.py

…

test_export_idempotent_writes.py

fix(export): stop rewriting unchanged wiki/Obsidian pages on every run (#3060)

2026-09-23 16:54:04 +01:00

test_export_path_length.py

…

test_export.py

fix(export): complete the vis-network crash fix and pin the tooltip XSS boundary (#3699, #3686 follow-ups)

2026-09-20 18:07:23 +01:00

test_external_stub_endpoints.py

fix(build): mint typed external stubs for undeclared import endpoints (#2873)

2026-09-16 16:20:01 +01:00

test_extract_cache_location.py

…

test_extract_cli.py

…

test_extract_code_only_cli.py

…

test_extract_php_closures.py

test(php): cover file-scope, no-duplicate, and method-scope closures (#3409/#3461 follow-up)

2026-09-23 19:45:40 +01:00

test_extract.py

fix(extract): skip the process pool up front when spawn can't re-import __main__ (#3669)

2026-09-26 13:53:08 +01:00

test_extraction_spec_ids.py

…

test_extractors_registry.py

…

test_falkordb_integration.py

…

test_file_label_disambiguation.py

…

test_file_node_id_spec.py

…

test_file_slice.py

…

test_forwarding_review_findings.py

…

test_gemini_hook.py

…

test_global_add_tag_inference.py

…

test_global_graph.py

…

test_go_builtin_call_targets.py

…

test_go_import_repoint.py

fix(go): repoint intra-module imports_from edges from go_pkg_ sinks to the package's files

2026-09-22 14:58:12 +01:00

test_go_interface_methods.py

Preserve case-only interface signature owners

2026-09-22 14:58:12 +01:00

test_go_qualified_resolution.py

…

test_god_nodes_cli.py

…

test_god_nodes_exclude_hubs.py

…

test_google_workspace.py

…

test_hollow_chunks_arm_shrink_guard.py

…

test_home_sandbox.py

…

test_hook_chain_survives_skip.py

…

test_hook_guard_token_match.py

…

test_hook_guard.py

…

test_hook_out_of_project_paths.py

…

test_hook_strict.py

…

test_hooks.py

fix(hooks): resolve the output dir from GRAPHIFY_OUT in the sh gates, not a literal graphify-out/

2026-09-14 18:49:21 +01:00

test_hyperedge_member_shapes.py

…

test_hyperedge_roundtrip.py

…

test_hypergraph.py

…

test_id_normalization_contract.py

…

test_ignore_file_encoding.py

…

test_image_vision.py

…

test_import_extension_resolution.py

…

test_import_self_loops.py

…

test_imported_export_forwarding.py

…

test_incomplete_build_guard.py

…

test_incremental_mtime_collision.py

…

test_incremental.py

fix: preserve cross-file edges during incremental updates

2026-09-25 16:15:15 +01:00

test_indirect_call_arrow_single_param_shadow.py

…

test_indirect_call_block_scoped_shadow.py

Add regression tests for block scoped let/const shadowing

2026-09-20 13:59:26 +01:00

test_indirect_call_catch_binding_shadow.py

…

test_indirect_call_external_import_shadow.py

…

test_indirect_call_for_of_binding_shadow.py

…

test_indirect_call_function_expression_shadow.py

…

test_indirect_call_nested_closure_shadow.py

…

test_indirect_dispatch_assign_return.py

…

test_indirect_dispatch_getattr.py

…

test_indirect_dispatch.py

…

test_inferred_confidence_rubric.py

…

test_ingest_url_type.py

fix(ingest): classify a URL by its host, not by text it contains

2026-09-26 13:53:08 +01:00

test_ingest.py

…

test_inherited_field_receivers.py

…

test_injection_sentinel_coverage.py

…

test_install_references.py

…

test_install_roundtrip.py

…

test_install_strings.py

…

test_install_upgrade.py

…

test_install_version_stamp.py

…

test_install_version_warning.py

…

test_install.py

Add regression tests for the install CRLF and idempotency guard fix

2026-09-22 17:30:28 +01:00

test_issue_3405_python_resolution.py

…

test_issue_3472_source_file_collision.py

…

test_java_enum_members.py

fix(java): attach enum body members to the enum, not the file

2026-09-20 13:59:25 +01:00

test_java_member_calls.py

…

test_java_type_resolution.py

…

test_js_callback_calls.py

…

test_js_destructured_export.py

Add a regression test for unexported require destructures

2026-09-14 18:49:19 +01:00

test_js_dynamic_import_affected.py

…

test_js_dynamic_imports.py

…

test_js_exported_fn_call_resolution.py

…

test_js_exported_scalar_bindings.py

…

test_js_import_resolution.py

fix(js): follow tsconfig references so solution-file path aliases resolve (#3745)

2026-09-26 13:53:08 +01:00

test_js_module_level_anonymous_calls.py

Add regression tests for module level anonymous calls

2026-09-13 17:47:55 +01:00

test_js_this_member_expressions.py

…

test_jsconfig_baseurl.py

…

test_kotlin_grammar.py

test(kotlin): cover companion members + incremental persistence (#1698 follow-up)

2026-09-17 11:09:52 +01:00

test_kotlin_object_literal.py

…

test_label_retry.py

fix(labeling): retry and report partial community labels

2026-09-22 17:30:28 +01:00

test_labeling.py

fix(labeling): retry and report partial community labels

2026-09-22 17:30:28 +01:00

test_language_resolvers.py

…

test_languages.py

fix(julia): extract macro definitions and @enum types

2026-09-26 13:48:37 +01:00

test_llm_backends.py

…

test_llm_parser_reasoning.py

…

test_llm_parser.py

…

test_long_path_hashing.py

…

test_loose_sibling_import_resolution.py

fix: preserve loose sibling import resolution

2026-09-23 17:01:39 +01:00

test_lua_import.py

test: cover bare require() imports edges for Lua (#3320)

2026-09-13 17:47:57 +01:00

test_manifest_ingest.py

fix(manifest_ingest): resolve inherited groupId and ${...} properties in pom.xml (#3806)

2026-09-25 16:01:47 +01:00

test_manifest_tomli_required.py

…

test_markdown_code_spans.py

fix(watch): keep code-span mention edges through a rebuild over an existing graph

2026-09-16 14:50:54 +01:00

test_mcp_ingest.py

…

test_merge_chunks_validation.py

…

test_merge_graphs_cli.py

…

test_minhash.py

…

test_multigraph_compat.py

…

test_multigraph_diagnostics.py

fix(diagnostics): separate external reference edges

2026-09-17 11:01:37 +01:00

test_multilang.py

…

test_no_dedup_flag.py

…

test_node_id_canonical.py

…

test_non_regular_files.py

…

test_non_string_node_ids.py

…

test_objc_category_interfaces.py

…

test_objc_field_table_remap.py

…

test_objc_member_calls.py

…

test_objc_property_ivar_receivers.py

…

test_obsidian_dangling_member.py

…

test_obsidian_filename_cap.py

…

test_obsidian_unicode_tags.py

…

test_obsidian_vault_migration.py

…

test_ocaml.py

fix(ocaml): extract classes and their methods and instance variables

2026-09-26 13:45:58 +01:00

test_office_incremental.py

…

test_office_limits.py

…

test_ollama_retry_cap.py

…

test_ollama.py

…

test_openai_custom_endpoint.py

…

test_out_dir_evidence.py

…

test_oversized_document_slicing.py

…

test_owned_type_sources.py

…

test_package_json_subpath_imports.py

…

test_partial_cache.py

…

test_partial_extraction_warning.py

…

test_pascal_call_scoping.py

…

test_pascal_resolution.py

…

test_pascal.py

…

test_path_cli.py

…

test_paths.py

…

test_pdf_slicing.py

…

test_pdf_token_estimate.py

…

test_pg_introspect.py

…

test_phantom_cross_package_call.py

…

test_phantom_external_import.py

Add an end to end regression test for the reporter's exact repro

2026-09-17 11:01:38 +01:00

test_php_object_creation.py

…

test_php_type_resolution.py

…

test_pin_hash_seed.py

fix(cli): wait for the hash-seed re-exec on Windows instead of os.execvpe (#3799)

2026-09-25 15:44:21 +01:00

test_pipeline.py

…

test_provider_registry.py

…

test_prs.py

…

test_prune_sweeps_orphans.py

…

test_python_decorators.py

…

test_python_import_resolution.py

fix: retract provisional package import edges

2026-09-23 17:02:17 +01:00

test_python_parse_memoization.py

…

test_python_underscore_resolution.py

…

test_query_cli.py

…

test_query_induced_edges.py

…

test_query_mcp_direction.py

…

test_query_names_its_graph.py

…

test_querylog.py

…

test_r_extractor.py

feat: add R language extractor

2026-09-21 19:10:13 +01:00

test_rationale.py

…

test_read_hook.py

Add regression tests for the guard hook timeouts

2026-09-13 17:47:54 +01:00

test_reflect.py

…

test_relation_collapse_precedence.py

fix(build): preserve higher confidence on same-relation edge collision (#3703)

2026-09-21 18:04:04 +01:00

test_replace_or_append_section.py

…

test_report_gap_thresholds.py

Add regression tests for the undocumented components gate

2026-09-25 15:44:21 +01:00

test_report.py

…

test_resolve_memoization.py

…

test_ruby_resolution.py

fix: resolve inherited Ruby member calls

2026-09-16 14:43:05 +01:00

test_rust_self_member_calls.py

fix: resolve generic Rust self calls

2026-09-18 15:16:09 +01:00

test_scala_self_type.py

…

test_scip_ingest.py

…

test_search_hook.py

Add regression tests for the guard hook timeouts

2026-09-13 17:47:54 +01:00

test_security.py

…

test_semantic_cache_basename_recovery.py

Add regression test for dangling edge pruning consistency

2026-09-14 18:52:06 +01:00

test_semantic_cache_out_root.py

…

test_semantic_cleanup.py

…

test_semantic_fragment_sanitize.py

…

test_semantic_id_remap_root.py

…

test_semantic_similarity.py

…

test_serve_http.py

…

test_serve.py

fix(serve): get_node/get_neighbors accept node_id/id, not just label

2026-09-22 17:30:28 +01:00

test_settings_merge.py

…

test_skill_version_warning.py

…

test_skillgen_input_path_injection.py

Add regression tests executing Step 1 with a hostile substituted path

2026-09-25 16:01:53 +01:00

test_skillgen.py

chore(lock): sync uv.lock for the #3490 dependency-floor bumps; fix stale skillgen windows test

2026-09-12 21:49:56 +01:00

test_solidity_extractor.py

feat: add Solidity language extractor

2026-09-21 19:13:40 +01:00

test_source_key_memoization.py

…

test_sourceless_call_targets.py

fix(extract): skip calls to sourceless stubs

2026-09-13 17:47:54 +01:00

test_src_layout_import_resolution.py

fix: guard ambiguous absolute Python imports

2026-09-23 17:01:39 +01:00

test_stale_prune.py

…

test_stat_index_husk.py

…

test_stat_index_portability.py

…

test_swift_builtin_noise.py

…

test_swift_computed_properties.py

…

test_swift_cross_file_calls.py

…

test_swift_import_resolution.py

…

test_swift_protocol_requirements.py

fix(swift): extract method requirements declared in a protocol body

2026-09-20 13:59:25 +01:00

test_symbol_resolution.py

…

test_terraform_modules.py

feat(terraform): resolve local module sources and directory topology

2026-09-15 18:01:35 +01:00

test_terraform.py

fix(terraform): redact the value paired with a secret-named name in name/value lists

2026-09-27 18:39:51 +01:00

test_trailing_newline_not_a_syntax_error.py

…

test_transcribe.py

…

test_tree_html.py

…

test_ts_decorators.py

…

test_ts_generators.py

…

test_ts_import_require.py

…

test_ts_import_type_arguments.py

test(ts): de-flake the normalizer scaling test that reddened v8 CI

2026-09-20 18:53:35 +01:00

test_ts_inheritance.py

…

test_ts_namespace.py

…

test_ts_new_expression_calls.py

…

test_ts_parse_warning.py

…

test_ts_receiver_member_calls.py

…

test_type_only_import_cycles.py

…

test_typescript_enum_members.py

…

test_typescript_module_extensions.py

…

test_uninstall_scope.py

…

test_unmapped_at_alias_resolution.py

…

test_unverified_semantic_shrink.py

…

test_validate.py

…

test_vbnet_extractor.py

feat: add VB.NET language extractor

2026-09-21 19:06:50 +01:00

test_vue_extraction.py

…

test_walk_python_tree_iterative.py

…

test_watch_manifest_location.py

…

test_watch.py

Add regression tests for the shared output graphify root marker fix

2026-09-22 17:30:28 +01:00

test_wheel_packaging.py

…

test_wiki_link_filename_parity.py

…

test_wiki_truncation_indicator.py

…

test_wiki.py

…

test_word_count_cache.py

…

test_zero_node_no_cache.py

…