aragoss

7 ms·

1.
by aragoss 2mo ago
199 green and you were stunned, did you check whether those tests would actually catch it if the fix had been subtly wrong, or was seeing green enough?
2.
by aragoss 2mo ago
how are you actually handling that separation in practice right now, different agent for the tests, or still mostly manual?
3.
by aragoss 2mo ago
have you actually tried breaking something on purpose and seeing if claude's own tests catch it, or is it more that they've just run fine so far?
4.
by aragoss 5mo ago
Hey HN, About 3 months ago I posted here the first version of Pii-shield, the tool that sanitizes logs to hide api-keys using Shannon entropy, Luhn algorithm for credit cards, and regex for custom pii data. The tool itself worked well, but
5.
Show HN: A Mutating Webhook to automatically strip PII from K8s logs(github.com)
25 points by aragoss 5mo ago|3 comments
6.
by aragoss 7mo ago
Thank you! Appreciate the kind words.
7.
by aragoss 8mo ago
Thank you! Hearing that it's being shared is the best kind of validation. If your team ends up trying it out and has any feature requests (or catches any edge cases), I’d love to hear them!
8.
by aragoss 8mo ago
Currently, no — the scanner focuses on entropy and specific Key Names, not value patterns (Regex). However, if your UUIDs live in consistent fields (e.g., request_id, trace_token, uuid), you can add those field names to the Sensitive Keys l
9.
by aragoss 8mo ago
Yes, absolutely. You can fine-tune the sensitivity via the PII_ENTROPY_THRESHOLD environment variable. If you consider UUIDs to be sensitive in your context (or if you are getting false positives), you can adjust the threshold. For example,
10.
by aragoss 8mo ago
Thanks! UUIDs: By default—no. Since UUIDs are Hex (limited charset 0-f), they have lower entropy than Base64 secrets. The threshold is tuned to sit safely above UUIDs but below API keys. Naming: You are totally right. Currently, it focuses
11.
by aragoss 8mo ago
Update: Seeing some folks pulling the Docker image. Just a heads up — the default entropy threshold is 3.8, which is tuned for API keys. If you are testing with simple words like 'test', it might not catch them (by design). Check
12.
Show HN: PII-Shield – Log Sanitization Sidecar with JSON Integrity (Go, Entropy)(github.com)
20 points by aragoss 8mo ago|11 comments
13.
by aragoss 8mo ago
Hi HN, I'm a QA engineer and the creator of Chaos Proxy. I built this because... I built this because debugging HTTP traffic with local proxies (like Charles or Proxyman) has become a bottleneck for me. Getting a GUI app running in CI
14.
Show HN: Chaos Proxy – Cloud-native alternative to Charles Proxy for teams(chaos-proxy.debuggo.app)
2 points by aragoss 8mo ago|1 comments