"Source to Sink team on IBM Bob 2.0 hackathon Hackathon"

Team Idea

We're building a Bob-powered PR reviewer that follows sensitive data through code (CNICs, phone numbers, emails, API keys) and flags it when it ends up in logs or third-party APIs without masking. It runs as a GitHub Action, blocks risky merges, and Bob suggests the fix.

Team Members

Syeda Zunaira Ali

syeda_zunaira_ali250

Submission

Source to Sink: Bob Catches Data Leaks in PRs

IBM Bob reviews every pull request, follows sensitive data through your code (CNICs, emails, card numbers, or any field you define) and blocks the merge when it leaks into logs, third-party APIs or API responses. Then Bob helps you fix it.