Potential fix for code scanning alert no. 15: Use of externally-controlled format string

CodeMeAPixel · github-advanced-security[bot] · CodeMeAPixel · commit 53362efca525 · 2026-06-12T12:45:03.000-06:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/packages/lib/security/backfill-password-history.ts b/packages/lib/security/backfill-password-history.ts
@@ -130,7 +130,7 @@ export async function backfillUserPasswordHistory(userId: string): Promise<boole
 
     return true
   } catch (error) {
-    console.error(`Failed to backfill password history for user ${userId}:`, error)
+    console.error('Failed to backfill password history for user %s:', userId, error)
     throw error
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -130,7 +130,7 @@ export async function backfillUserPasswordHistory(userId: string): Promise<boole`
`130`	`130`
`131`	`131`	`return true`
`132`	`132`	`} catch (error) {`
`133`		- console.error(`Failed to backfill password history for user ${userId}:`, error)
	`133`	`+ console.error('Failed to backfill password history for user %s:', userId, error)`
`134`	`134`	`throw error`
`135`	`135`	`}`
`136`	`136`	`}`