Dilee 6dcc3330b3 fix(security): add missing GitHub OAuth token patterns and snapshot redact flag ...

- Add gho_, ghu_, ghs_, ghr_ prefix patterns (OAuth, user-to-server,
  server-to-server, and refresh tokens) — all four types used by
  GitHub Apps and Copilot auth flows were absent from _PREFIX_PATTERNS
- Snapshot HERMES_REDACT_SECRETS at module import time instead of
  re-reading os.getenv() on every call, preventing runtime env mutations
  (e.g. LLM-generated export commands) from disabling redaction

2026-03-31 10:30:48 -07:00

6.6 KiB

Raw Blame History

View Raw