{"repo":"NousResearch/hermes-agent","public_id":"102308","display_label":"Credential material exposed in warning log messages","summary":"These issues and PRs concern warning log statements in MCP OAuth and Docker environment code that include sensitive credential material verbatim. The work involves fixing those log messages to omit or redact the credential content.","subsystem":null,"counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":103646,"merged_at":"2026-09-05T12:35:17+00:00"},"resolution":{"state":"resolved","by":"pr-103646"},"freshness":{"state":"verified","last_verified_at":"2026-09-05T12:35:17+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":102308,"pr_number":103646,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-05T12:35:17+00:00"}],"members":[{"kind":"issue","number":102308,"title":"Corrupt-token and docker_env warnings log credential material verbatim (mcp_oauth.py, environments/docker.py)","url":null,"state":"closed"},{"kind":"pr","number":102332,"title":"mcp_oauth, docker: fix logging of credential material in warnings","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"c957432685","number":0},{"kind":"pr","value":"#103646","number":103646}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":103646,"title":"fix(security): corrupt MCP token files and rejected docker_env values are logged without the credential material (#102308, salvage #102332)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["contributors/emails/222165401+Sahilvishnaliya@users.noreply.github.com","tests/tools/test_docker_environment.py","tests/tools/test_mcp_oauth.py","tools/environments/docker.py","tools/mcp_oauth.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}