Skip to content

docs(orb): correct the anonymization-key description in .env.example - #1280

Merged
JSONbored merged 1 commit into
mainfrom
docs/orb-anon-secret-accuracy
Jun 24, 2026
Merged

docs(orb): correct the anonymization-key description in .env.example#1280
JSONbored merged 1 commit into
mainfrom
docs/orb-anon-secret-accuracy

Conversation

@JSONbored

Copy link
Copy Markdown
Owner

Summary

The Orb exporter anonymizes repo/PR identifiers with a dedicated, randomly-generated per-instance secret stored in system_flags (introduced in #1257), not a key derived from the App private key. The .env.example TELEMETRY NOTICE still described the old App-private-key derivation; this corrects the prose to match the shipped code (the src/selfhost/orb-collector.ts comments were already updated in #1257).

Scope

Doc-only: one prose block in .env.example. No code/behavior change.

Validation

.env.example only — no tests affected.

The exporter anonymizes with a dedicated, randomly-generated per-instance secret stored in
system_flags (since #1257), not a key derived from the App private key. Update the TELEMETRY
NOTICE prose to match the code (the orb-collector.ts comments were already corrected in #1257).
@dosubot dosubot Bot added the size:XS label Jun 24, 2026
@superagent-security

Copy link
Copy Markdown
Contributor

Superagent didn't find any vulnerabilities or security issues in this PR.

@JSONbored JSONbored self-assigned this Jun 24, 2026
@JSONbored
JSONbored merged commit dbd5ad6 into main Jun 24, 2026
14 checks passed
@JSONbored
JSONbored deleted the docs/orb-anon-secret-accuracy branch June 24, 2026 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant