From 151a6d5cabe4701d676673fe89255d753d5851dd Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Sat, 14 Feb 2026 05:21:31 +0000
Subject: [PATCH] security: remove debug step that could expose GITHUB_TOKEN

Removed the "Debug Git Config" step from all workflows as it could
potentially expose the GITHUB_TOKEN in logs (shown in git URL rewrites).

Now that the workflows are passing with the HTTPS libsignal fix,
this debug output is no longer needed.

Addresses security concern raised by Copilot AI in PR #170.

https://claude.ai/code/session_015R3U3kiprQiNTTNNt31Sg6
---
 .github/workflows/build.yml | 7 -------
 .github/workflows/lint.yml  | 7 -------
 .github/workflows/test.yml  | 7 -------
 3 files changed, 21 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b9bef369..e5156277 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -44,13 +44,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-yarn-
 
-      - name: Debug Git Config
-        run: |
-          echo "=== Git URL Rewrites ==="
-          git config --global --get-regexp url
-          echo "=== Environment ==="
-          env | grep -i git || true
-
       - name: Install dependencies
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 17791a95..43551035 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -44,13 +44,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-yarn-
 
-      - name: Debug Git Config
-        run: |
-          echo "=== Git URL Rewrites ==="
-          git config --global --get-regexp url
-          echo "=== Environment ==="
-          env | grep -i git || true
-
       - name: Install packages
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5b9f9be1..e19e434f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -45,13 +45,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-yarn-
 
-      - name: Debug Git Config
-        run: |
-          echo "=== Git URL Rewrites ==="
-          git config --global --get-regexp url
-          echo "=== Environment ==="
-          env | grep -i git || true
-
       - name: Install dependencies
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}