Fix code scanning alert no. 2: Clear-text logging of sensitive information

icereed · github-advanced-security[bot] · web-flow · commit 575801b4f5eb · 2024-10-04T08:25:38.000+02:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/main.go b/main.go
@@ -135,8 +135,7 @@ func createLLM() (llms.Model, error) {
 		if bearerToken != "" {
 			retryClient.RequestLogHook = func(l retryablehttp.Logger, r *http.Request, i int) {
 				r.Header.Set("Authorization", fmt.Sprintf("Bearer %s", bearerToken))
-				shortenedBearerToken := fmt.Sprintf("%s...", r.Header.Get("Authorization")[:5])
-				log.Printf("Request with bearer %s token to %s %s", shortenedBearerToken, r.Method, r.URL)
+				log.Printf("Request with bearer token to %s %s", r.Method, r.URL)
 			}
 		}
 

Original file line number	Diff line number	Diff line change
`@@ -135,8 +135,7 @@ func createLLM() (llms.Model, error) {`
`135`	`135`	`if bearerToken != "" {`
`136`	`136`	`retryClient.RequestLogHook = func(l retryablehttp.Logger, r *http.Request, i int) {`
`137`	`137`	`r.Header.Set("Authorization", fmt.Sprintf("Bearer %s", bearerToken))`
`138`		`- shortenedBearerToken := fmt.Sprintf("%s...", r.Header.Get("Authorization")[:5])`
`139`		`- log.Printf("Request with bearer %s token to %s %s", shortenedBearerToken, r.Method, r.URL)`
	`138`	`+ log.Printf("Request with bearer token to %s %s", r.Method, r.URL)`
`140`	`139`	`}`
`141`	`140`	`}`
`142`	`141`