[victorkjung]

run_insanely_fast_whisper calls subprocess.list2cmdline(cmd_list) to render the full insanely-fast-whisper command, prints it to stderr (the Running: ... line), and on non-zero exit raises OSError(f\"Failed to execute {cmd}\"). If --hf-token <hf_xxxx> is in cmd_list, the token leaks into:

• Process stderr (worker stdout in any serverless/Docker context)
• The OSError args, which propagates into:
  • Caller's error responses (RunPod Serverless's job status API surfaces the full traceback)
  • Any error-tracking / logging the caller has wired up

I personally hit this twice running transcribe-anything on RunPod Serverless before realizing the wrapper was the source — both times forcing a HuggingFace token rotation across multiple machines. The fix is local and tiny: regex-mask the token before any logging or raising.

The regex matches both --hf-token and --hf_token variants.

The subprocess itself still receives the raw token via cmd_list (which is passed to iso_env.open_proc unchanged), so functionality is untouched. Only the displayed/raised string is sanitized.

Diff summary

+    import re
...
+    cmd_safe = re.sub(r"(--hf[-_]token)\s+\S+", r"\1 <REDACTED>", cmd)
-    sys.stderr.write(f"Running:\n  {cmd}\n")
+    sys.stderr.write(f"Running:\n  {cmd_safe}\n")
...
-            msg = f"Failed to execute {cmd}\n "
+            msg = f"Failed to execute {cmd_safe}\n "

[zackees]

Right direction — this is a legitimate security fix, not a stylistic change. Confirmed against main (commit 5c89267): src/transcribe_anything/insanely_fast_whisper.py:299 still writes the unmasked cmd to stderr, and line 288 raises OSError(f\"Failed to execute {cmd}\n \") containing the raw --hf-token <hf_xxxx> value.

Filed #93 to track the underlying vulnerability — this PR closes it.

A couple of small notes for the reviewer:

• The regex r\"(--hf[-_]token)\s+\S+\" correctly handles both --hf-token (what insanely_fast_whisper.py:272 actually emits) and --hf_token (the alias accepted by whisper.py/whisperx.py).
• The fix is local to the --device insane codepath. whisperx.py:467 and whisper.py build their own command strings; neither currently logs/raises the assembled command, so they don't leak today — but worth a quick audit before next release to be sure nobody added a debug print.
• Functionality is preserved: cmd_list (passed to iso_env.open_proc) is unchanged; only the displayed/raised string is sanitized.

Recommend merging. Closes #93.