Hide credentials in checkout preparation errors

2026-11-02 11:45:42 +00:00
parent a2d75c462c
commit e736166a39
5 changed files with 88 additions and 2 deletions
--- a/docs/cli.md
+++ b/docs/cli.md
@@ -244,6 +244,7 @@ the selected Git remote (default `origin`), requires its peeled commit to match
 the required full `--commit` object ID, checks out that commit detached, then
 verifies the tag, HEAD, and clean worktree. With `--prepared`, it performs those
 checks read-only against the existing checkout and does not fetch or check out.
+Preparation diagnostics mask userinfo in HTTP(S) remote URLs.
 In either mode, it loads the profile from the verified source. `--expected-module`
 optionally checks that the profile selects the module chosen by a launcher;
 module selection itself remains profile-owned. The command compares the selected