Skip to content

Commit 44842f9

Browse files
committed
fix(supervisor): strip backpressure redis password from debug env log
Add TRIGGER_DEQUEUE_BACKPRESSURE_REDIS_PASSWORD to the secret strip-list so it never lands in the DEBUG startup log, with a comment to keep new secrets out.
1 parent e6b5a67 commit 44842f9

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

apps/supervisor/src/index.ts

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -72,10 +72,13 @@ class ManagedSupervisor {
7272
private readonly wideEventsNoisyRoutes = env.TRIGGER_WIDE_EVENTS_NOISY_ROUTES;
7373

7474
constructor() {
75+
// Strip secret-like env vars before debug-logging the rest. Add any new
76+
// secret env var here so it never lands in the DEBUG "Starting up" log.
7577
const {
7678
TRIGGER_WORKER_TOKEN,
7779
MANAGED_WORKER_SECRET,
7880
COMPUTE_GATEWAY_AUTH_TOKEN,
81+
TRIGGER_DEQUEUE_BACKPRESSURE_REDIS_PASSWORD,
7982
...envWithoutSecrets
8083
} = env;
8184

0 commit comments

Comments
 (0)