PRDCT-616: mask internal identifiers and colleagues' identities in tutorial screenshots - #1100
Open
Iamfle4ka wants to merge 1 commit into
Open
PRDCT-616: mask internal identifiers and colleagues' identities in tutorial screenshots#1100Iamfle4ka wants to merge 1 commit into
Iamfle4ka wants to merge 1 commit into
Conversation
…torial screenshots 44 images redacted in place (public/ + colocated src copies, 88 files): ad-hoc/ (10): replace GCP project id, service-account email, key id, and GCS bucket with placeholders; rewrite the service-account key JSON in ex-bigquery-6 (the original exposed the full private key); blank colleagues' names in Versions panels; gray out photo avatars; replace Snowflake workspace identifiers with placeholders. branches/figures/ (34): blank one colleague's name (version lines, Last Edit / Created By columns, diff modals) and email; gray out photo avatars and Created By thumbnails; scrub the faint name visible through a dimmed modal backdrop and a truncated name at a crop edge. Verified by a macOS Vision OCR sweep over all 77 tutorial images: zero remaining matches for the leaked identifiers and names. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The Getting Started tutorial ships 2018–2021 screenshots captured in internal projects that never went through a masking pass. This PR redacts the confirmed leaks in place — 44 images (each in
public/tutorial/**and its byte-identicalsrc/content/docs/tutorial/**copy).What was exposed and is now masked:
ad-hoc/ex-bigquery-6.png— the full service-account private key. The key JSON was readable in both the editor pane and the paste modal:private_keymaterial, key id, client id, SA email, project id. Replaced with an obviously-fake placeholder JSON.Revocation escalation— resolved 2026-08-27: confirmed the service account/key is no longer active.ex-bigquery-7,cloud-platform-service-account-3,cloud-platform-storage-3,ex-bigquery-8→ consistent placeholders (my-gcp-project,bigquery-extractor@…,my-tutorial-bucket).transformation-2/4→ placeholders.branches/figures/images and 5ad-hoc/images: version-history lines, Last Edit / Created By columns, diff-modal author lines, user chips — blanked or replaced with a neutral gray avatar circle. Includes the faint name showing through a dimmed modal backdrop (branch-deleted) and a truncated name at a crop edge (transformation-branch-input-mapping).Verification: a macOS Vision OCR sweep over all 77 tutorial images reports zero remaining matches for the leaked identifiers/names; every edited region was also eyeballed. Image-only diff — no content, nav, or build changes.
Deliberately out of scope: the
Keboola Internal / Playgrounds / Sample projectbreadcrumbs (context, not PII) and the keep/retire decision on the two pages themselves — that stays with PRDCT-487 (SECTION-MAP U4). Masking now doesn't pre-empt that call; it just stops the live exposure while it's made.🤖 Generated with Claude Code