fix: avoid exposing api key

Andreagit97 · Andreagit97 · commit 3683df33c75c · 2026-02-04T17:37:44.000+01:00
Signed-off-by: Andrea Terzolo &lt;andreaterzolo3@gmail.com&gt;
diff --git a/config/config.go b/config/config.go
@@ -415,15 +415,15 @@ func mergeEnvironmentVariables(c *AgentConfig) *AgentConfig {
 		c.HostName = v
 	}
 
-	// Support API_KEY and DD_API_KEY but prefer DD_API_KEY.
+	// Support API_KEY and STS_API_KEY but prefer STS_API_KEY.
 	var apiKey string
 	if v := os.Getenv("API_KEY"); v != "" {
 		apiKey = v
 		log.Info("overriding API key from env API_KEY value")
 	}
 	if v := os.Getenv("STS_API_KEY"); v != "" {
 		apiKey = v
-		log.Infof("overriding API key from env DD_API_KEY value %s", apiKey)
+		log.Infof("overriding API key from env STS_API_KEY value")
 	}
 	if apiKey != "" {
 		vals := strings.Split(apiKey, ",")

Original file line number	Diff line number	Diff line change
`@@ -415,15 +415,15 @@ func mergeEnvironmentVariables(c AgentConfig) AgentConfig {`
`415`	`415`	`c.HostName = v`
`416`	`416`	`}`
`417`	`417`
`418`		`- // Support API_KEY and DD_API_KEY but prefer DD_API_KEY.`
	`418`	`+ // Support API_KEY and STS_API_KEY but prefer STS_API_KEY.`
`419`	`419`	`var apiKey string`
`420`	`420`	`if v := os.Getenv("API_KEY"); v != "" {`
`421`	`421`	`apiKey = v`
`422`	`422`	`log.Info("overriding API key from env API_KEY value")`
`423`	`423`	`}`
`424`	`424`	`if v := os.Getenv("STS_API_KEY"); v != "" {`
`425`	`425`	`apiKey = v`
`426`		`- log.Infof("overriding API key from env DD_API_KEY value %s", apiKey)`
	`426`	`+ log.Infof("overriding API key from env STS_API_KEY value")`
`427`	`427`	`}`
`428`	`428`	`if apiKey != "" {`
`429`	`429`	`vals := strings.Split(apiKey, ",")`