Question

While building a user-registration service, a developer accepts a GitHub Copilot suggestion that adds a helpful debug log line. During code review, a teammate notices the suggested statement writes the full request body—including the user's plaintext password and email—to the application log. What is the most responsible way to handle this Copilot suggestion?

Accepted Answer

Reject or modify the suggestion to remove sensitive data from logs, because the developer remains accountable for validating output against privacy and security requirements.

Answer

Keep the log statement because Copilot generated it based on common, widely accepted logging patterns, so it reflects industry best practice.

Answer

Keep the log line but restrict it to the production environment only, so developers can debug real user issues faster.

Answer

Disable GitHub Copilot for the entire repository, since it produced code that leaks personally identifiable information.