Github token is exposed in the logs

change-metrics / monocle

Monocle helps teams and individual to better organize daily duties and to detect anomalies in the way changes are produced and reviewed.

https://changemetrics.io

GNU Affero General Public License v3.0

372 stars 58 forks source link

Closed benlangfeld closed 1 year ago

benlangfeld commented 1 year ago

2023-02-10 19:37:35 INFO    Macroscope.Main:182: Group end {"group":"https://api.github.com/graphql-ghp_<my token here> for <workspace name>"}

The Github token should never be logged.

TristanCacqueray commented 1 year ago

Thank you for the feedback, that's indeed an issue.