Merge pull request #10 from TeaEntityLab/alert-autofix-11

johnteee · web-flow · commit d68c3522ef15 · 2026-05-14T18:50:28.000+08:00
Potential fix for code scanning alert no. 5: Clear-text logging of sensitive information
diff --git a/teaagent/cli/_handlers/_mcp.py b/teaagent/cli/_handlers/_mcp.py
@@ -24,7 +24,7 @@ def mcp_serve_command(args: argparse.Namespace) -> int:
                 rotation_window_seconds=args.oauth_rotation_window,
             )
             if error:
-                print(error, file=sys.stderr)
+                print('Invalid OAuth key ring configuration.', file=sys.stderr)
                 return 1
         elif args.oauth_active_kid:
             print(

Original file line number	Diff line number	Diff line change
`@@ -24,7 +24,7 @@ def mcp_serve_command(args: argparse.Namespace) -> int:`
`24`	`24`	`rotation_window_seconds=args.oauth_rotation_window,`
`25`	`25`	`)`
`26`	`26`	`if error:`
`27`		`- print(error, file=sys.stderr)`
	`27`	`+ print('Invalid OAuth key ring configuration.', file=sys.stderr)`
`28`	`28`	`return 1`
`29`	`29`	`elif args.oauth_active_kid:`
`30`	`30`	`print(`