fix(azdo): strip credentials from origin URL in the not-ready message

2026-10-01 12:38:02 +02:00
parent 27dca48c43
commit c834f17c78
2 changed files with 17 additions and 1 deletions
@@ -242,4 +242,20 @@ public sealed class CompanyApproveTests : IDisposable
        Assert.Equal(0, _verify.CallCount);
        Assert.False(BareHasBranch());
    }
+
+    [Fact]
+    public async Task CheckReady_NonAdoRemote_DoesNotEchoCredentials()
+    {
+        if (!GitRepoFixture.IsGitAvailable()) return;
+        GitRepoFixture.RunGit(_repo.RepoDir, "remote", "add", "origin", "https://user:s3cret@git.example.com/x/y.git");
+        var azdo = new AzureDevOpsClient(new StubHttpClientFactory(Ado()), AzureDevOpsClientTests.PatStore(_tempDir, "geheim"));
+        var publisher = new PullRequestPublisher(_git, azdo, _db.CreateFactory(), _broadcaster, _cfg,
+            NullLogger<PullRequestPublisher>.Instance);
+
+        var msg = await publisher.CheckReadyAsync(_repo.RepoDir, default);
+
+        Assert.NotNull(msg);
+        Assert.Contains("git.example.com", msg);
+        Assert.DoesNotContain("s3cret", msg);
+    }
 }