You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Patch Changes
9c5117f: Security: clawops_config_set no longer writes the value it sets to the MCP audit log in clear. Values are now redacted when their config path names a secret (for example models.providers.openai.apiKey), and secret fields inside a JSON object value are redacted individually. The config path is logged as written; before this fix the path was redacted and the value was not. The confirmation prompt applies the same redaction. Existing audit logs are not rewritten, so if you set a secret through clawops_config_set before this release, check ~/.clawops/mcp-audit.log and rotate that secret.