Skip to content

Finish secret redaction#2589

Merged
dgageot merged 3 commits intodocker:mainfrom
dgageot:finish-secret-redaction
Apr 29, 2026
Merged

Finish secret redaction#2589
dgageot merged 3 commits intodocker:mainfrom
dgageot:finish-secret-redaction

Conversation

@dgageot
Copy link
Copy Markdown
Member

@dgageot dgageot commented Apr 29, 2026

  • Make sure to redact tool call's output too
  • Make sure we can replicate the top level configuration with hooks configuration

dgageot added 3 commits April 29, 2026 10:16
…nsform hook

The recent commits added a third leg to redact_secrets (tool output) and exposed all three legs as first-class hook entries via the new tool_response_transform event. Update the docs to match:

- docs/configuration/hooks: add tool_response_transform to the events table, the per-event extra-fields table, and a new "Tool-Response-Transform Specific Output" subsection documenting hook_specific_output.updated_tool_response. Update the redact_secrets builtin row and the auto-injected callout to reflect that the same builtin now covers pre_tool_use, before_llm_call, and tool_response_transform.

- docs/configuration/agents: update the redact_secrets field description, the YAML schema sketch, and the "Redacting Secrets" section to enumerate three defenses. Rewrite the equivalent-hook callout to point at examples/redact_secrets_hooks.yaml and explain the manual wiring.

- docs/guides/secrets: extend the redact_secrets bullet list with the tool-output leg.

Assisted-By: docker-agent
@dgageot dgageot requested a review from a team as a code owner April 29, 2026 09:16
@dgageot dgageot merged commit 9e430be into docker:main Apr 29, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants