Skip to content

Mask CLI secrets in the audit log by parsed argument, not argv position - #72650

Open
potiuk wants to merge 5 commits into
apache:mainfrom
potiuk:security/cli-audit-log-masking
Open

Mask CLI secrets in the audit log by parsed argument, not argv position#72650
potiuk wants to merge 5 commits into
apache:mainfrom
potiuk:security/cli-audit-log-masking

Limit in-token masking to whole values and short-option clusters

bdd57a3
Select commit
Loading
Failed to load commit list.
WIP / WIP succeeded Oct 16, 2026 in 3s

Ready for review

No match found based on configuration.
### 🆓💸 The account apache is enabled for the pro plan for free

Please consider [signing up for the pro plan](https://github.com/marketplace/wip), all revenue is donated to [Processing | p5.js](https://p5js.org/download/support.html) – one of the most diverse and impactful Open Source community there is.

Details

.github/wip.yml does not exist, the default configuration is applied:

terms:
- wip
- work in progress
- 🚧
locations: title

Read more about WIP configuration

View more details on WIP