← Back to issue list

http auth token occasionally leaked

View original Github issue

Metadata

Project
craft-application
Number
#792
Type
issue
State
open
Author
setharnold
Labels
Status: Triaged Type: Bug
Created
2025-06-27 01:24:19+00:00
Updated
2025-06-27 16:53:10+00:00
Closed

Current evaluation

No evaluation has been recorded for this issue yet.

Issue body

### Bug Description Hello, the logging can occasionally leak http auth tokens "in the clear". While these may not have the same value as a full password or key, it'd still be nice if they weren't logged. ### To Reproduce `snapcraft remote-build` in a CI system was reported to have this problem. ### part yaml ```shell ``` ### Relevant log output ```shell Writing objects: 100% (25/25), 1.64 GiB | 12.60 MiB/s, done. Total 25 (delta 2), reused 3 (delta 0), pack-reused 0 error: RPC failed; HTTP 401 curl 22 The requested URL returned error: 401 send-pack: unexpected disconnect while reading sideband packet fatal: the remote end hung up unexpectedly Everything up-to-date Failed to execute git command: git -C /home/redacted/.local/share/snapcraft/remote-build/snapcraft-juju-redacted/repo push 'https://redacted:TOKEN REDACTED@git.launchpad.net/~redacted/[snip] HEAD:master --force Recommended resolution: Consider checking your git configuration for settings which may cause issues. ```

Evaluation history

No evaluation history available.