Skip to content

Comments

fix: redact sensitive info in logs and fix strict type violations#70

Open
Rayhan1967 wants to merge 1 commit intoworkos:mainfrom
Rayhan1967:fix/critical-security-and-types
Open

fix: redact sensitive info in logs and fix strict type violations#70
Rayhan1967 wants to merge 1 commit intoworkos:mainfrom
Rayhan1967:fix/critical-security-and-types

Conversation

@Rayhan1967
Copy link

Summary

This PR addresses two critical issues identified in the codebase:

  1. Security: Redacts sensitive information (API keys and client IDs) from installation error logs to prevent potential leakage in plaintext files.
  2. Code Quality: Removes forbidden as any and as unknown usage, replacing them with proper TypeScript interfaces and type-only imports to adhere to the project's strict typing standards.

Changes

  • Modified src/utils/clack-utils.ts to include a redactSensitiveInfo utility.
  • Applied redaction in src/utils/clack-utils.ts's installPackage function.
  • Updated src/bin.ts and src/commands/install.ts to use proper types instead of as any.
  • Exported InstallArgs for proper type-safety in the CLI entry point.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant