close
Skip to content

fix: only show executable in ExecError.__str__, not full command line#2336

Merged
benhoyt merged 1 commit intocanonical:mainfrom
benhoyt:execerror-str
Feb 22, 2026
Merged

fix: only show executable in ExecError.__str__, not full command line#2336
benhoyt merged 1 commit intocanonical:mainfrom
benhoyt:execerror-str

Conversation

@benhoyt
Copy link
Copy Markdown
Collaborator

@benhoyt benhoyt commented Feb 20, 2026

This is to avoid credentials or sensitive data passed in command line args showing up in exception messages and logs. Sensitive data shouldn't be passed in command line args, but it sometimes is, so better to be cautious here. We do something similar with tracing: only send the executable name for pebble exec.

This comment was marked as resolved.

Copy link
Copy Markdown
Collaborator

@tonyandrewmeyer tonyandrewmeyer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for handling this! Agreed that it's better to lose a little debugging info in exchange for helping people avoid foot-guns.

@tonyandrewmeyer tonyandrewmeyer changed the title fix: only show executable ExecError.__str__, not full command line fix: only show executable in ExecError.__str__, not full command line Feb 20, 2026
@benhoyt benhoyt merged commit 0ce8a0f into canonical:main Feb 22, 2026
64 checks passed
@benhoyt benhoyt deleted the execerror-str branch February 22, 2026 19:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants