[I] Secrets need to be redacted (tooling-llmao)

["andrewmusselman (via GitHub)" <gi...@apache.org>]

andrewmusselman opened a new issue, #54:
URL: https://github.com/apache/tooling-llmao/issues/54

   Note in this report (https://docs.litellm.ai/blog/security-incident-oct-21-2026):
   
   "GitHub CLI OAuth token exposure
   
   After a thorough investigation, we have observed specific situations in which Claude Code will embed a user's GitHub CLI OAuth token into a response body, and in situations where response bodies are logged, these tokens may appear in LiteLLM logs."
   
   Regardless of what "embed.. into a response body" means, we should audit the lifecycle of any text handled so any secrets are redacted before being logged or saved.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org