From 86a8b62e2c6a04bbda97d64218de32d53dbf7e9a Mon Sep 17 00:00:00 2001 From: John Lee Date: Thu, 4 Jun 2026 08:59:29 +0800 Subject: [PATCH] Potential fix for code scanning alert no. 30: Clear-text logging of sensitive information Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- teaagent/cli/_handlers/_mcp_trust.py | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/teaagent/cli/_handlers/_mcp_trust.py b/teaagent/cli/_handlers/_mcp_trust.py index ee8e1be9..7cc5fcd3 100644 --- a/teaagent/cli/_handlers/_mcp_trust.py +++ b/teaagent/cli/_handlers/_mcp_trust.py @@ -56,9 +56,16 @@ def _is_sensitive_key(key: Any) -> bool: def _print_json(value: Any) -> None: + def _mask_leaf_values(obj: Any) -> Any: + if isinstance(obj, dict): + return {key: _mask_leaf_values(item) for key, item in obj.items()} + if isinstance(obj, list): + return [_mask_leaf_values(item) for item in obj] + return '[REDACTED]' + print( json.dumps( - _redact_sensitive(_strip_sensitive_fields(value)), + _mask_leaf_values(_redact_sensitive(_strip_sensitive_fields(value))), ensure_ascii=False, indent=2, sort_keys=True,