Skip to content

Merge branch 'master' into ivana/migrate-argv-2

a85cb01
Select commit
Loading
Failed to load commit list.
Merged

feat(argv): Support span streaming #6227

Merge branch 'master' into ivana/migrate-argv-2
a85cb01
Select commit
Loading
Failed to load commit list.
@sentry/warden / warden: code-review completed May 7, 2026 in 2m 27s

1 issue

code-review: Found 1 issue (1 low)

Low

Experimental span streaming captures sys.argv without client-side scrubbing - `sentry_sdk/traces.py:574`

The experimental span streaming feature (_experiments={'trace_lifecycle': 'stream'}) sets process.command_args from sys.argv on all segment spans without client-side scrubbing (traces.py:574). Users who pass sensitive values as CLI arguments (e.g., --password=secret) and opt into this experimental feature may inadvertently send credentials to Sentry. This feature is explicitly marked EXPERIMENTAL and 'Do not use in production', limiting real-world exposure. The attributes bypass EventScrubber and are serialized directly via SpanBatcher._to_transport_format(). Server-side scrubbing may apply but is not verified in the client code.


Duration: 40.5s · Tokens: 142.1k in / 1.5k out · Cost: $0.97 (+verification: $0.79)