Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/e2e_tests.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -239,7 +239,7 @@ jobs:
echo "OPENAI_API_KEY is set: $([ -n "$OPENAI_API_KEY" ] && echo 'YES' || echo 'NO')"
echo "OPENAI_API_KEY length: ${#OPENAI_API_KEY}"

Comment on lines 239 to 241
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛠️ Refactor suggestion

Do not print presence/length of OPENAI_API_KEY.

Even metadata leaks aid exfiltration attempts.

-          echo "OPENAI_API_KEY is set: $([ -n "$OPENAI_API_KEY" ] && echo 'YES' || echo 'NO')"
-          echo "OPENAI_API_KEY length: ${#OPENAI_API_KEY}"
+          echo "OPENAI_API_KEY present: [redacted]"

Or remove entirely.

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
echo "OPENAI_API_KEY is set: $([ -n "$OPENAI_API_KEY" ] && echo 'YES' || echo 'NO')"
echo "OPENAI_API_KEY length: ${#OPENAI_API_KEY}"
echo "OPENAI_API_KEY present: [redacted]"
🧰 Tools
🪛 YAMLlint (1.37.1)

[error] 241-241: trailing spaces

(trailing-spaces)

🤖 Prompt for AI Agents
In .github/workflows/e2e_tests.yaml around lines 239 to 241, remove the two echo
lines that print the presence and length of OPENAI_API_KEY; do not output any
metadata about secret values. Delete those echo statements (or replace them with
a non-sensitive, generic log such as a static "OPENAI_API_KEY configured"
message that does not reveal presence, length, or any secret-derived info) to
prevent metadata leakage.

docker compose --version
docker compose version
docker compose up -d

- name: Wait for services
Expand Down