fix(cli): suppress secrets in stacktraces (datahub-project#5302)

maggiehays · Aug 1, 2022 · d91dd86 · d91dd86
1 parent ced1f37
commit d91dd86
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/metadata-ingestion/src/datahub/entrypoints.py b/metadata-ingestion/src/datahub/entrypoints.py
@@ -169,6 +169,17 @@ def main(**kwargs):
                     exc,
                     line_wrap=MAX_CONTENT_WIDTH,
                     truncate_vals=10 * MAX_CONTENT_WIDTH,
+                    suppressed_vars=[
+                        r".*password.*",
+                        r".*secret.*",
+                        r".*key.*",
+                        r".*access.*",
+                        # needed because sometimes secrets are in url
+                        r".*url.*",
+                        # needed because sqlalchemy uses it underneath
+                        # and passes all params
+                        r".*cparams.*",
+                    ],
                     suppressed_paths=[r"lib/python.*/site-packages/click/"],
                     **kwargs,
                 )