Fig 1Debug prints tokensHover to scrub · arrows stepargos upload ./screenshots
DEBUG valve: the flag the CLI docs tell you to setRedaction canisters: media.ts and deploy.ts already strip the tokenWith DEBUG=@argos-ci/core, the CI-detection debug() call logs the whole process.env and upload.ts logs its params and config, so GITHUB_TOKEN and the 40-character ARGOS_TOKEN reach stderr before the first network request. media.ts and deploy.ts already dropped the token before logging. The fix (Medium, CVSS 6.8; @argos-ci/core 6.8.5) redacts inside debug() itself.