fn render_args(args: &[OsString]) -> Vec<String>Expand description
Renders the opaque arguments for the report. Only the report is redacted; the launched arguments never
change. Redaction is a shallow name rule, never a parser: a --option whose name holds a sensitive part
hides its value (--api-key=<redacted>, or the next argument); a NAME=value whose (possibly dotted) NAME
holds one hides the value (mcp_servers.gh.env.GITHUB_TOKEN=<redacted>); a Name: value header whose name
holds one hides the value (Authorization: <redacted>). Every argument is scanned, including after a --,
and boolean-looking names get no exemption, because hiding too much only costs readability.