Protecting Sensitive Data During Confidential Computing Debugging

A computer program product comprising:

• one or more computer-readable storage media;
• and
• program instructions stored on the one or more computer-readable storage media to perform operations comprising:
• identifying sensitive variables marked with a confidential computing sensitive tag within a compiled microservice code;
• identifying unmarked variables related to the sensitive variables within the compiled microservice code;
• tagging the unmarked variables related to the sensitive variables with a sensitive attribute;
• generating debugging information entries comprising the sensitive variables and the sensitive attribute tag of the tagged unmarked variables;
• generating a protect flag in a debugging reply packet based on the debugging information entries;
• and
• denying data access to downstream debugger clients based on the protect flag.

A computer system comprising:

• a processor set;
• one or more computer-readable storage media;
• and
• program instructions stored on the one or more computer-readable storage media to cause the processor set to perform operations comprising:
• identifying sensitive variables marked with a confidential computing sensitive tag within a compiled microservice code;
• identifying unmarked variables related to the sensitive variables within the compiled microservice code;
• tagging the unmarked variables related to the sensitive variables with a sensitive attribute;
• generating debugging information entries comprising the sensitive variables and the sensitive attribute tag of the tagged unmarked variables;
• generating a protect flag in a debugging reply packet based on the debugging information entries;
• and
• denying data access to downstream debugger clients based on the protect flag.