From a55e31cd422f52c6cec4fd2bf2d0b57d2198e06c Mon Sep 17 00:00:00 2001
From: AGI <248829238+rootagi@users.noreply.github.com>
Date: Wed, 12 Aug 2026 06:13:20 +0530
Subject: [PATCH] Potential fix for code scanning alert no. 3: Clear-text
 storage of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 src/eva/replay/recorder.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/eva/replay/recorder.py b/src/eva/replay/recorder.py
index 3e9057a..dbd8b5f 100644
--- a/src/eva/replay/recorder.py
+++ b/src/eva/replay/recorder.py
@@ -63,5 +63,8 @@ def record_replay_event(
         "cwd": clean_cwd,
     }
 
+    serialized_record = json.dumps(record)
+    sanitized_record = redact_secrets(serialized_record)
+
     with open(events_file, "a", encoding="utf-8") as f:
-        f.write(json.dumps(record) + "\n")
+        f.write(sanitized_record + "\n")