google / triage-party

🎉 Triage Party: massively multi-player GitHub triage 🎉
Apache License 2.0
502 stars 80 forks source link

GH Token is exposed in pod logs #276

Open displague opened 2 years ago

displague commented 2 years ago

The GH Token is included in the emitted log output. With logs potentially being shipped to users or operators that should not have access to GH credentials, these secret values should be redacted from the logs.

I1108 13:29:14.352910       1 main.go:129] triage runtime config: {Cache:/root/.cache/triage-party Repos:[] DebugNumbers:[] GitHubAPIURL: GitHubToken:ghp_{token} GitLabToken:}