| # Sensitive Data Audit Report |
|
|
| **Date:** 2026-03-04 |
| **Scope:** Full repository scan — all file types (Python, YAML, JSON, TOML, Docker, shell scripts, notebooks, CI/CD) |
| **Branch:** claude/audit-sensitive-data-DkqUy |
|
|
| ## Summary |
|
|
| **No hardcoded secrets, API keys, tokens, passwords, or credentials found in the codebase.** |
|
|
| ## Detailed Findings |
|
|
| ### 1. Secrets & Credentials |
|
|
| | Check | Result | |
| |---|---| |
| | Hardcoded API keys (HF, OpenAI, Anthropic, etc.) | None found | |
| | Hardcoded passwords/tokens in source | None found | |
| | `.env` files committed | None (`.env` is in `.gitignore`) | |
| | Private keys or certificates | None found | |
| | Database connection strings | None found | |
| | URLs with embedded credentials | None found | |
| | Patterns: `sk-`, `hf_`, `ghp_`, `gho_`, `github_pat_` | None found | |
|
|
| ### 2. Environment Variable Handling |
|
|
| All sensitive values are read from environment variables at runtime: |
|
|
| - `HF_TOKEN` — used for gated model access and Hub push (read via `os.environ.get()`) |
| - `OBLITERATUS_SSH_KEY` — SSH key path for remote benchmarks (default: `~/.ssh/hf_obliteratus`) |
| - `OBLITERATUS_SSH_HOST` — remote SSH host (no default, must be provided) |
| - `OBLITERATUS_TELEMETRY_REPO` — telemetry dataset repo (defaults only on HF Spaces) |
|
|
| ### 3. Docker Security |
|
|
| - **Dockerfile** runs as non-root user (`appuser`) |
| - **`.dockerignore`** properly excludes: `.env`, `.git`, tests, scripts, docs, notebooks, model weights |
| - No secrets baked into Docker image layers |
|
|
| ### 4. CI/CD (`.github/workflows/ci.yml`) |
|
|
| - Uses pinned action SHAs (not mutable tags) — good supply-chain practice |
| - No secrets referenced in workflow file |
| - No secret injection via env vars |
|
|
| ### 5. `.gitignore` Coverage |
|
|
| Properly excludes: `.env`, virtual environments (`.venv/`, `venv/`, `env/`), model weights (`*.pt`, `*.bin`, `*.safetensors`), IDE configs, caches, logs |
|
|
| ### 6. HuggingFace Space Configuration |
|
|
| Based on current HF Space settings: |
|
|
| - **No secrets configured** in Variables and secrets — this means: |
| - Gated models (e.g., Llama) will fail authentication |
| - Telemetry Hub sync (push) will fail without `HF_TOKEN` |
| - **Recommendation:** Add `HF_TOKEN` as a Space secret if gated model access or telemetry push is needed |
| - Space visibility is **Public** (appropriate for open-source project) |
|
|
| ### 7. Minor Notes |
|
|
| - `scripts/run_benchmark_remote.sh` uses `-o StrictHostKeyChecking=no` for SSH — acceptable for ephemeral HF Space connections but worth noting for security-conscious deployments |
| - Telemetry auto-enables on HF Spaces (`OBLITERATUS_TELEMETRY=1` by default) — this is documented and expected behavior, collecting only anonymous benchmark metrics |
|
|
| ## Recommendations |
|
|
| 1. **Add `HF_TOKEN` as an HF Space secret** if you need gated model access or telemetry push |
| 2. Consider adding a `pre-commit` hook with a secrets scanner (e.g., `detect-secrets` or `gitleaks`) to prevent accidental secret commits in the future |
| 3. The current `.gitignore` and `.dockerignore` are well-configured — no changes needed |
| |
