fix: mask token in ForgejoConfig __repr__ #166

Merged
fuzzy merged 1 commit from fix/132-config-token-leak into main 2026-07-06 08:46:37 +00:00
Owner

Adds custom __repr__ to ForgejoConfig that shows only the first 4 characters of the token (e.g., my-s****). Prevents accidental token leakage in logs or tracebacks.

Closes #132

Adds custom `__repr__` to `ForgejoConfig` that shows only the first 4 characters of the token (e.g., `my-s****`). Prevents accidental token leakage in logs or tracebacks. Closes #132
fix(config): mask token in ForgejoConfig __repr__
All checks were successful
CI / lint-and-test (pull_request) Successful in 1m36s
4fdc257e20
Add custom __repr__ that shows only first 4 chars of token.
Prevents accidental token leak in logs or tracebacks.

Closes #132
fuzzy scheduled this pull request to auto merge when all checks succeed 2026-07-06 08:37:01 +00:00
the.auditor left a comment

Audit Review — PR #166

Clean fix for #132 (Priority/High). Custom __repr__ on ForgejoConfig masks token (first 4 chars + ****). Tests confirm token not leaked and empty token handled gracefully.

No suggestions.

Summary

Result: COMMENT — no issues found.

## Audit Review — PR #166 Clean fix for #132 (Priority/High). Custom `__repr__` on `ForgejoConfig` masks token (first 4 chars + `****`). Tests confirm token not leaked and empty token handled gracefully. No suggestions. ## Summary **Result:** COMMENT — no issues found.
the.auditor left a comment

APPROVED. Token properly masked, closes #132. Merge when ready.

APPROVED. Token properly masked, closes #132. Merge when ready.
fuzzy force-pushed fix/132-config-token-leak from 4fdc257e20
All checks were successful
CI / lint-and-test (pull_request) Successful in 1m36s
to 83f02a2c0f
All checks were successful
CI / lint-and-test (pull_request) Successful in 1m34s
2026-07-06 08:39:32 +00:00
Compare
fuzzy scheduled this pull request to auto merge when all checks succeed 2026-07-06 08:39:43 +00:00
fuzzy merged commit 83f02a2c0f into main 2026-07-06 08:46:37 +00:00
fuzzy deleted branch fix/132-config-token-leak 2026-07-06 08:46:37 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
thwap/hottea!166
No description provided.