Group of 2 You'll notice
Tool output and log scrubbing now also redacts Stripe, Google API, and Google OAuth secret keys
What
The pattern list Claude Code uses to find and redact secrets in tool output and logs has been expanded. It now also catches:
- Stripe-style secret keys (
sk_live_,sk_test_,sk_prod_,rk_...) - Google API keys (
AIza...) - Google OAuth client secrets (
GOCSPX-...)
Matches are replaced with a placeholder like [REDACTED-PAT] (PAT stands for personal access token) instead of being shown in plain text. A second related redaction table was also updated with matching <token> replacements for these same patterns.
Why
This reduces the chance that live API keys or secrets accidentally show up in command output, logs, or anything Claude Code displays or transmits, lowering the risk of credentials leaking.