Finding sensitive data and data spills
To find data spills or sensitive data in global configurations, components, and
user-defined queries, run the repotools-gc dumpArtifacts
command and then search
its output. If the sensitive data must be deleted, you can then scrub or
delete the items.
Before you begin
Important: This command writes only global components, configurations, and user-defined
queries into the server file system. Ask a JazzAdmin user or other IBM®
Engineering Lifecycle Management (ELM) project
area administrators to check for and remove sensitive data in other ELM
applications.
- This command adds significant load to the server and can take a long time to run.
- You can also run this command to see the dump jobs that were initiated since the last server restart.
Procedure
Example
Your organization is working on a new car named "Super Car", which is now
considered a secret name. Components, configurations, and any user-defined queries that mention this
name must be scrubbed so that all the sensitive data is deleted.
- Ask a user with JazzAdmin repository privileges to run the
dumpArtifacts
command. - Search the command output recursively for the string "Super Car". You find the string in several files. Open those files and find the URLs of the items, as shown in these examples.
- Consider creating a text file that contains the URLs of the items that contain the string "Super Car". With the URLs in one file, it's convenient to open many components, configurations, and queries.
What to do next
- Copy each identified URL into a browser. This action requires the GCM Administrator role.
- If the sensitive data must be deleted, scrub or delete the item. For more information about the Scrub commands and to see what is deleted, see the related task.
Ask a JazzAdmin user or other ELM project area administrators to check for and remove sensitive data in the other ELM applications. In the related topic about ELM security considerations, see the section about deleting sensitive data and its links to procedures for other ELM applications.