fix(supervisor): strip backpressure redis password from debug env log

Add TRIGGER_DEQUEUE_BACKPRESSURE_REDIS_PASSWORD to the secret strip-list so it
never lands in the DEBUG startup log, with a comment to keep new secrets out.
This commit is contained in:
nicktrn
2026-06-04 19:34:03 +01:00
parent 5e67d6d219
commit 5240de8100
+3
View File
@@ -72,10 +72,13 @@ class ManagedSupervisor {
private readonly wideEventsNoisyRoutes = env.TRIGGER_WIDE_EVENTS_NOISY_ROUTES;
constructor() {
// Strip secret-like env vars before debug-logging the rest. Add any new
// secret env var here so it never lands in the DEBUG "Starting up" log.
const {
TRIGGER_WORKER_TOKEN,
MANAGED_WORKER_SECRET,
COMPUTE_GATEWAY_AUTH_TOKEN,
TRIGGER_DEQUEUE_BACKPRESSURE_REDIS_PASSWORD,
...envWithoutSecrets
} = env;