Skip to content

Commit 6237b8b

Browse files
Potential fix for code scanning alert no. 92: Clear-text logging of sensitive information
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent f69f142 commit 6237b8b

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

working/run_msi_v2_once.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -44,11 +44,11 @@ def acquire_mtls_pop_token_strict():
4444
r2 = acquire_mtls_pop_token_strict()
4545
print("token received (2)")
4646

47-
# If MSAL exposes a cache indicator, print it (optional)
47+
# If MSAL exposes a cache indicator, avoid printing its concrete value to logs
4848
ts1 = r1.get("token_source") or r1.get("source") or ""
4949
ts2 = r2.get("token_source") or r2.get("source") or ""
5050
if ts1 or ts2:
51-
print(f"source1={ts1} source2={ts2}")
51+
print("token sources are available (not logged for security)")
5252

5353
sys.exit(0)
5454
except Exception as ex:

0 commit comments

Comments
 (0)