SEV-3: reported, blocks only with --strict

A secret may be going to your logs

What goes wrong

Passwords or tokens end up in a log service that more people can read than your database.

Remove this log line, or log only that the action happened.

npx sigship

Run it in your project. It reports this check as secret-in-logs, along with 16 others. Nothing leaves your machine.