Repository navigation
Conversation
The docs guide for onboarding progress tells agents to pass the run token as a -f flag to sentry api. That puts the value in the flag.raw-field telemetry tag. Add a RUN_TOKEN pattern to redactCredentialText so the token is replaced with [REDACTED] in every outgoing envelope. Refs VDY-366 Co-authored-by: Cursor <cursoragent@cursor.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub. 1 Skipped Deployment
|
Abdkhan14
marked this pull request as ready for review
November 9, 2026 18:11
evanpurkhiser
approved these changes
Nov 9, 2026
Co-authored-by: Cursor <cursoragent@cursor.com>
This branch was previously deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The sentry-docs onboarding progress guide tells agents to call
sentry api organizations/<org>/onboarding/agent/status/ -f 'runToken=<code>'. That puts the run token in theflag.raw-fieldtelemetry tag. The existingredactCredentialTextfunction covers Bearer tokens andsntry*_credentials but not run tokens.Add a
RUN_TOKENpattern that matchesrunToken=<value>,"runToken":"<value>", and their JSON-escaped forms, and replace the value with[REDACTED].redactTelemetryEnvelopealready runs this function over every string in every outgoing envelope, so the fix covers all telemetry paths — flag tags,flag.data, unknown-command argv, and error messages.Refs VDY-366
Verification
test.eachcases fail without the pattern (token visible in output) and pass with itpnpm run typecheck && pnpm run lintclean