feat(argv): Support span streaming #6227
1 issue
code-review: Found 1 issue (1 low)
Low
Experimental span streaming captures sys.argv without client-side scrubbing - `sentry_sdk/traces.py:574`
The experimental span streaming feature (_experiments={'trace_lifecycle': 'stream'}) sets process.command_args from sys.argv on all segment spans without client-side scrubbing (traces.py:574). Users who pass sensitive values as CLI arguments (e.g., --password=secret) and opt into this experimental feature may inadvertently send credentials to Sentry. This feature is explicitly marked EXPERIMENTAL and 'Do not use in production', limiting real-world exposure. The attributes bypass EventScrubber and are serialized directly via SpanBatcher._to_transport_format(). Server-side scrubbing may apply but is not verified in the client code.
Duration: 40.5s · Tokens: 142.1k in / 1.5k out · Cost: $0.97 (+verification: $0.79)