fix: redact credentials from URLs in logs, exceptions, and persisted state

[jpshackelford]

Summary

Fixes #2152

This PR addresses a security issue where credentials embedded in plugin source URLs (e.g., https://oauth2:SECRET_TOKEN@gitlab.com/org/private-repo) were being exposed in:

1. Application logs - Clone URLs and git commands were logged with credentials visible
2. Exception messages - Error messages included full URLs with credentials
3. Persisted conversation state - Plugin source URLs with credentials were stored in ResolvedPluginSource

Changes

• New utility function: redact_url_credentials(url) in git/utils.py that replaces credentials in URLs with **** (e.g., https://****@gitlab.com/org/repo)
• Updated run_git_command(): Redacts credentials from error logs, debug logs, and GitCommandError exception messages/command fields
• Updated cached_repo.py: Redacts credentials in clone log messages
• Updated plugin/fetch.py: Redacts credentials in PluginFetchError exceptions and warning logs
• Updated plugin/types.py: ResolvedPluginSource.from_plugin_source() now redacts credentials before persistence (credentials are only needed at fetch time)
• Public API export: redact_url_credentials is exported from openhands.sdk for cross-repo usage (related to Security: Credentials in plugin source URLs exposed via API responses OpenHands#12959)

Example

Before:

INFO - Cloning repository from https://oauth2:SECRET_TOKEN@gitlab.com/org/repo.git

After:

INFO - Cloning repository from https://****@gitlab.com/org/repo.git

Checklist

• If the PR is changing/adding functionality, are there tests to reflect this?
• If there is an example, have you run the example to make sure that it works?
• If there are instructions on how to run the code, have you followed the instructions and made sure that it works?
• If the feature is significant enough to require documentation, is there a PR open on the OpenHands/docs repository with the same branch name?
• Is the github CI passing?

@jpshackelford can click here to continue refining the PR

---

Agent Server images for this PR

• GHCR package: https://github.com/OpenHands/agent-sdk/pkgs/container/agent-server

Variants & Base Images

Variant	Architectures	Base Image	Docs / Tags
java	amd64, arm64	eclipse-temurin:17-jdk	Link
python	amd64, arm64	nikolaik/python-nodejs:python3.12-nodejs22	Link
golang	amd64, arm64	golang:1.21-bookworm	Link

Pull (multi-arch manifest)

# Each variant is a multi-arch manifest supporting both amd64 and arm64
docker pull ghcr.io/openhands/agent-server:f4d42de-python

Run

docker run -it --rm \
  -p 8000:8000 \
  --name agent-server-f4d42de-python \
  ghcr.io/openhands/agent-server:f4d42de-python

All tags pushed for this build

ghcr.io/openhands/agent-server:f4d42de-golang-amd64
ghcr.io/openhands/agent-server:f4d42de-golang_tag_1.21-bookworm-amd64
ghcr.io/openhands/agent-server:f4d42de-golang-arm64
ghcr.io/openhands/agent-server:f4d42de-golang_tag_1.21-bookworm-arm64
ghcr.io/openhands/agent-server:f4d42de-java-amd64
ghcr.io/openhands/agent-server:f4d42de-eclipse-temurin_tag_17-jdk-amd64
ghcr.io/openhands/agent-server:f4d42de-java-arm64
ghcr.io/openhands/agent-server:f4d42de-eclipse-temurin_tag_17-jdk-arm64
ghcr.io/openhands/agent-server:f4d42de-python-amd64
ghcr.io/openhands/agent-server:f4d42de-nikolaik_s_python-nodejs_tag_python3.12-nodejs22-amd64
ghcr.io/openhands/agent-server:f4d42de-python-arm64
ghcr.io/openhands/agent-server:f4d42de-nikolaik_s_python-nodejs_tag_python3.12-nodejs22-arm64
ghcr.io/openhands/agent-server:f4d42de-golang
ghcr.io/openhands/agent-server:f4d42de-java
ghcr.io/openhands/agent-server:f4d42de-python

About Multi-Architecture Support

• Each variant tag (e.g., f4d42de-python) is a multi-arch manifest supporting both amd64 and arm64
• Docker automatically pulls the correct architecture for your platform
• Individual architecture tags (e.g., f4d42de-python-amd64) are also available if needed

[github-actions]

API breakage checks (Griffe)

Result: Passed

Action log

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
openhands-sdk/openhands/sdk
__init__.py	21	2	90%	69–70
openhands-sdk/openhands/sdk/git
cached_repo.py	129	4	96%	391–392, 427–428
utils.py	126	26	79%	125–127, 152–154, 188–189, 196–201, 206–207, 217–222, 232–234, 262
openhands-sdk/openhands/sdk/plugin
fetch.py	79	9	88%	156–157, 159, 167–168, 172, 338–339, 343
types.py	235	6	97%	65, 68, 264, 353, 769, 777
TOTAL	18814	5690	69%