attestate / attestate/crawler

"Starting worker thread" leaks node credentials in logs

Open
#7 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
6
Forks
1
PR merge metrics
No merged PRs in 30d

Description

- Say we want to post our logs for debugging to someone, then we have to make sure that we don't post the line starting with:

```
@attestate/extraction-worker:worker Starting as worker thread with queue options: "

```
Because it would include secret credentials. So for the console we should "censor" them.

Contributor guide

No contributing guide indexed for this repository

Research direction

Search the crawler for the log line beginning "@attestate/extraction-worker:worker Starting as worker thread with queue options:" and trace how its queue options are formatted. Verify the console output no longer exposes node credentials while retaining safe worker-start information.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
backend, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.