From 1b5698c13f0e63e66bd92a10af0f23207dbf92c7 Mon Sep 17 00:00:00 2001 From: Colin Dean Date: Tue, 27 Jan 2026 11:49:22 -0500 Subject: [PATCH 1/2] Change token type to SecretStr in Settings These really should be secret strings, so we can simply emit the settings object for debugging purposes. Signed-off-by: Colin Dean --- diff_poetry_lock/settings.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/diff_poetry_lock/settings.py b/diff_poetry_lock/settings.py index 1224289..bf40c57 100644 --- a/diff_poetry_lock/settings.py +++ b/diff_poetry_lock/settings.py @@ -53,7 +53,7 @@ class VelaSettings(BaseSettings, Settings): repo_branch: str = Field(env="VELA_REPO_BRANCH") # from step config including secrets - token: str = Field(env="PARAMETER_GITHUB_TOKEN") + token: SecretStr = Field(env="PARAMETER_GITHUB_TOKEN") lockfile_path: str = Field(env="PARAMETER_LOCKFILE_PATH", default="poetry.lock") api_url: str = Field(env="PARAMETER_GITHUB_API_URL", default="https://api.github.com") @@ -97,7 +97,7 @@ class GitHubActionsSettings(BaseSettings, Settings): base_ref: str = Field(env="github_base_ref") # from step config including secrets - token: str = Field(env="input_github_token") + token: SecretStr = Field(env="input_github_token") lockfile_path: str = Field(env="input_lockfile_path", default="poetry.lock") api_url: str = Field(env="github_api_url", default="https://api.github.com") From 50e60728a71942716b905dc47935b52c34b47ffb Mon Sep 17 00:00:00 2001 From: Colin Dean Date: Tue, 27 Jan 2026 12:46:16 -0500 Subject: [PATCH 2/2] Add SecretStr import to settings.py Signed-off-by: Colin Dean --- diff_poetry_lock/settings.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/diff_poetry_lock/settings.py b/diff_poetry_lock/settings.py index bf40c57..d535789 100644 --- a/diff_poetry_lock/settings.py +++ b/diff_poetry_lock/settings.py @@ -4,7 +4,7 @@ from typing import Any, ClassVar, Protocol, runtime_checkable from loguru import logger -from pydantic import BaseSettings, Field, PrivateAttr, ValidationError, validator +from pydantic import BaseSettings, Field, PrivateAttr, SecretStr, ValidationError, validator class PrLookupService(Protocol):