Don't log password & api-key

pilot/logger/logger.py

@@ -8,18 +8,38 @@ def setup_logger():
 
     # Create a log handler for file output
     file_handler = logging.FileHandler(filename=os.path.join(os.path.dirname(__file__), 'debug.log'), mode='w')
-    file_handler.setLevel(logging.DEBUG)
 
     # Apply the custom format to the handler
     formatter = logging.Formatter(log_format)
     file_handler.setFormatter(formatter)
+    # file_handler.addFilter(lambda record: record.levelno <= logging.INFO)
+    file_handler.addFilter(filter_sensitive_fields)
 
     # Create a logger and add the handler
     logger = logging.getLogger()
-    logger.setLevel(logging.DEBUG)
     logger.addHandler(file_handler)
 
+    if os.getenv('DEBUG') == 'true':
+        logger.setLevel(logging.DEBUG)
+    else:
+        logger.setLevel(logging.INFO)
+
     return logger
 
 
+sensitive_fields = ['--api-key', 'password']
+
+
+def filter_sensitive_fields(record):
+    if len(record.args):
+        args = record.args.copy()
+
+        for field in sensitive_fields:
+            if field in args:
+                args[field] = '*****'
+
+        record.args = args
+    return record.levelno <= logging.INFO
+
+
 logger = setup_logger()

pilot/main.py

@@ -32,7 +32,7 @@ def init():
 
     arguments = get_arguments()
 
-    logger.info(f"Starting with args: {arguments}")
+    logger.info('Starting with args: %s', arguments)
 
     return arguments