🛡️ Sentinel: [CRITICAL] TimeoutExpired 예외의 정보 유출 취약점 수정 (Fix information disclosure in subprocess timeout handling)

[seonghobae]

🚨 Severity: CRITICAL
💡 Vulnerability: subprocess.TimeoutExpired 예외 객체의 stdout과 stderr 속성은 마스킹 처리되지 않은 원시 데이터를 포함하므로 이를 그대로 로깅할 경우 토큰 등 민감한 정보가 유출될 위험이 있습니다.
🎯 Impact: 로그 파일이나 콘솔 출력 등을 통해 인증 토큰, 비밀번호 등의 정보가 노출될 수 있습니다.
🔧 Fix: sandboxed_verify.py에 SENSITIVE_DATA_SCRUB_PATTERNS와 scrub_sensitive_data 함수를 도입하고, 시간 초과 발생 시 출력 텍스트를 반환하는 timeout_output_text 함수가 마스킹된 문자열을 반환하도록 수정했습니다. 테스트 코드를 작성해 작동을 검증했습니다.
✅ Verification: 테스트, mypy, bandit, interrogate 등의 통과를 확인했습니다.

---

PR created automatically by Jules for task 14122590086490778214 started by @seonghobae

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[Copilot]

Pull request overview

Updates the scripts/ci/sandboxed_verify.py timeout-handling path to redact sensitive data from subprocess.TimeoutExpired output before printing, preventing secret leakage into CI logs. This aligns with the repo’s broader “scrub before logging” security posture and adds targeted tests to prevent regressions.

Changes:

• Add regex-based sensitive-data redaction (SENSITIVE_DATA_SCRUB_PATTERNS + scrub_sensitive_data) and apply it in timeout_output_text.
• Ensure TimeoutExpired.stdout / .stderr are sanitized before being printed on timeout.
• Add unit tests covering redaction and timeout output normalization; document the learning in .jules/sentinel.md.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
scripts/ci/sandboxed_verify.py	Introduces secret-scrubbing and applies it to timeout output handling to prevent log disclosure.
tests/test_sandboxed_verify.py	Adds tests validating scrubbing behavior and timeout-output masking.
.jules/sentinel.md	Records the security learning and prevention guidance for future work.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.