Baseline · Credential management

E-02 Credentials not written to logs

highfilesystem · CLI
Why it matters

Logs and error messages don’t leak keys.

How to test

Grep logs for secret patterns.

How to fix

Redact logs; filter sensitive fields.

Related checks · Credential management

E-01
Credentials stored non-plaintext
critical
E-03
Uses short-lived / least-scope tokens
med
E-04
Supports system keystore / TEE
med
E-05
Credentials can be revoked / rotated
med

← Back to full baseline