Configure Monolog to add a processor that redacts emails, tokens, and SSNs before writing logs; include request_id.
compliance-soc2-essentialsprivacy-pii+1
Low
Redact PII with log wrappers
Wrap logger to filter emails and tokens using regex before logging; include trace_id in every entry.
compliance-soc2-essentialsprivacy-pii+1
Low
Remove debug code from production
Delete Console.WriteLine, Debug.WriteLine, and temporary diagnostics before merging; rely on structured logging.
maintainabilityobservability-logging
Low
Replace echo with proper logging
Do not use echo/var_dump for diagnostics in application code; use a PSR-3 logger or error_log with levels.
observability-loggingstack-php
Low
Replace print statements with logging framework
Use the standard logging module (or your app's logger) instead of print() in committed code.
observability-loggingstack-python+1
Low
Security headers and request logging
Add middleware to set HSTS, X-Content-Type-Options, and secure cookies; log JSON with actor and trace_id for auth and admin routes.
compliance-soc2-essentialssecurity-hardening+1
Low
Structured audit events
Emit JSON audit events via ActiveSupport::Notifications with user_id, action, resource_id, and request_id.
compliance-soc2-essentialsobservability-logging
Low
Structured audit events with ILogger
Log security events via ILogger with properties {Action, UserId, ResourceId, Result, TraceId}; configure sink to JSON and send to SIEM.
compliance-soc2-essentialsobservability-logging
Low
Tag PII in schemas and events for RoPA
Mark columns and event fields with pii and purpose metadata; prefer hashed or tokenized variants in telemetry. Use these tags to auto-generate Records of Processing Activities (RoPA). (GDPR Art. 30)
compliance-gdprprivacy-pii+2
Low
Use message keys for error messages
Emit stable message keys (for i18n/observability) and resolve user-facing text via localization layers.
internationalization-i18nobservability-logging
Low
Wrap Errors with Context Information
When returning an error from a function, include contextual information. Use `fmt.Errorf` with `%w` (or similar error wrapping) to add a message while preserving the original error.