fix(egress): ignore stripped auth header in DLP scan

2026-06-08 15:43:46 -04:00
parent a64e3170cd
commit 4e570e3e2b
3 changed files with 81 additions and 1 deletions
@@ -24,6 +24,7 @@ from egress_addon_core import (  # type: ignore[import-not-found]  # pylint: dis
    is_git_push_request,
    load_config,
    match_route,
+    outbound_scan_headers,
    scan_inbound,
    scan_outbound,
 )
@@ -159,7 +160,7 @@ class EgressAddon:
                flow.request.pretty_host,
                request_path,
                query,
-                dict(flow.request.headers),
+                outbound_scan_headers(route, dict(flow.request.headers)),
                body,
            )
            dlp_result = scan_outbound(route, scan_text, os.environ)