Skip to content

Obfuscate example tokens and Sentera IDs#10

Merged
denisahearn merged 3 commits into
mainfrom
security-changes
May 12, 2026
Merged

Obfuscate example tokens and Sentera IDs#10
denisahearn merged 3 commits into
mainfrom
security-changes

Conversation

@denisahearn
Copy link
Copy Markdown
Contributor

@denisahearn denisahearn commented May 11, 2026

REMINDER: This is a public repository.

Why?

We don't want to give the impression that this information is valid and could be exploited

What?

Obfuscate/remove test data that was flagged by a security researcher as potentially sensitive information.

The tokens and IDs that were being included in README.md files in this repository were generated in a local, ephemeral development environment, and thus were only valid in that environment, but we don't want to give the impression that this information could be used to exploit FieldAgent in any way.

Screenshot(s)

JIRA Link

Code Review Strategy

QA Strategy

  • Merge latest main
  • Regression test
  • Test new feature

@denisahearn denisahearn changed the title Security updates Obfuscate example tokens and Sentera IDs May 11, 2026
Comment thread api/README.md Outdated
| Ruby | `$ ruby upsert_images.rb` | `FIELDAGENT_ACCESS_TOKEN=PAmnCNUyosKShN9K1AEflLOw6T7bA2fRTWTg-vL3P5Y FIELDAGENT_SERVER=https://api.sentera.com IMAGES_PATH="../test_files" SURVEY_SENTERA_ID=mjlmmrw_CO_lk07AcmeOrg_CV_deve_773b47acb_240514_160730 FILE_EXT="*.jpeg" SENSOR_TYPE="RGB" ruby upsert_images.rb` |
| Ruby | `$ ruby upsert_mosaics.rb` | `FIELDAGENT_ACCESS_TOKEN=PAmnCNUyosKShN9K1AEflLOw6T7bA2fRTWTg-vL3P5Y FIELDAGENT_SERVER=https://api.sentera.com FILE_PATH="../test_files/test.tif" SURVEY_SENTERA_ID=mjlmmrw_CO_lk07AcmeOrg_CV_deve_773b47acb_240514_160730 ruby upsert_mosaics.rb` |
| Ruby | `$ ruby create_ground_scouting_feature_set.rb` | `FIELDAGENT_ACCESS_TOKEN="PAmnCNUyosKShN9K1AEflLOw6T7bA2fRTWTg-vL3P5Y" FIELDAGENT_SERVER="https://api.sentera.com" SURVEY_SENTERA_ID="mjlmmrw_CO_lk07AcmeOrg_CV_deve_773b47acb_240514_160730" NUM_LOCATIONS=20 NUM_ATTACHMENTS_PER_FEATURE=2 WITH_ATTACHMENTS="none,some,all" ATTACHMENTS_PATH="../test_files" ATTACHMENTS_EXT="*.*" WITH_ATTACHMENT_NAME_KEYS=false,true WITH_ATTACHMENT_NAMES=false,true WITH_NOTES="none,some,all" FEATURE_SET_NAME="<Optional name, otherwise generated from inputs>" ruby create_ground_scouting_feature_set.rb` |
| Ruby | `$ ruby import_feature_set.rb` | `FIELDAGENT_ACCESS_TOKEN=********* FIELDAGENT_SERVER=https://api.sentera.com SURVEY_SENTERA_ID=000000_CO_aaaaXXXXXX_CV_deve_c00000000_000000_000000 GEOMETRY_PATH="../test_files/test.geojson" FILES_PATH="../test_files" FILE_EXT="*.jpeg" ruby import_feature_set.rb` |
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you think even this GUID formatting is giving too much away?
SURVEY_SENTERA_ID=000000_CO_aaaaXXXXXX_CV_deve_c00000000_000000_000000

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I changed the placeholder Sentera IDs with <YOUR ID> placeholders

e3ed687

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thanks.

@denisahearn denisahearn merged commit 1a8f402 into main May 12, 2026
@denisahearn denisahearn deleted the security-changes branch May 12, 2026 13:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants