collinmcnulty opened a new pull request #22627:
URL: https://github.com/apache/airflow/pull/22627


   The BaseHook currently logs connection details including password at the 
DEBUG level. While the password is redacted under normal conditions in task 
logs, there are edge cases where this can lead to a password leaking into logs, 
such as calling python code that uses a hook from a BashOperator.
   
   The value of logging the password simply seems small relative to the 
consequences of leaking to logs even in edge cases. There remain plenty of ways 
to log the password if that is explicitly what you want to do, such as `airflow 
connection list`.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to