Skip to content

Security Issue with logging sensitive env variables #244

@tanh609

Description

@tanh609

Is there an existing issue for this?

  • I have searched the existing issues and added correct labels.

Description

Current Behavior

The collect_farm_env_variables have a log statement that print out `FTRACK_API_KEY``

This can be an issue when the log level is set to DEBUG.

self.log.debug(f"Setting job env: {key}: {value}")

Expected Behavior

No API key or sensitive information is logged.

Steps To Reproduce:

No response

Additional context:

Version

Version of the server, ayon-core and the addon that's affected

What platform were you running when you found the bug?

Windows
Linux - Rocky9
Linux - Ubuntu
MacOS

You can also provide any additional information relevant to the issue.

Relevant log output:

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions