Valerio eb8c1c93f2 fix(cli): hide secret env values in --help output (#83) ... clap prints the current value of an arg's `env` var in --help by default, which leaks secrets (e.g. `[env: WEBCLAW_API_KEY=wc_...]`) for anyone who has them set. Add `hide_env_values = true` to every arg backed by a credential-bearing env var so --help shows the variable name only. Covers the CLI (WEBCLAW_API_KEY, SERPER_API_KEY, WEBCLAW_PROXY, WEBCLAW_PROXY_FILE, WEBCLAW_WEBHOOK_URL, WEBCLAW_LLM_BASE_URL) and the server (WEBCLAW_API_KEY). Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-07-02 15:12:23 +02:00
..
src	fix(cli): hide secret env values in --help output (#83)	2026-07-02 15:12:23 +02:00
Cargo.toml	fix(cli): close --on-change command injection via sh -c (P0) (#20)	2026-04-16 18:37:02 +02:00