From f3740e2f1b39771aefb91727c5b7e84fb156a4dc Mon Sep 17 00:00:00 2001
From: mateo-berri <277851410+mateo-berri@users.noreply.github.com>
Date: Thu, 21 May 2026 00:53:44 +0000
Subject: [PATCH] fix(rubrik): drop tool_call repr from normalize error to
 avoid leaking args

The TypeError raised in _normalize_tool_calls is caught by apply_guardrail's
broad except, which logs the message plus exc_info. Including repr(tc) in
the message could expose function arguments (potentially sensitive user
data) in the proxy log stream. Type name alone is enough for debugging.
---
 litellm/integrations/rubrik.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/litellm/integrations/rubrik.py b/litellm/integrations/rubrik.py
index 34639cee9f8..665d1209a30 100644
--- a/litellm/integrations/rubrik.py
+++ b/litellm/integrations/rubrik.py
@@ -261,7 +261,7 @@ class RubrikLogger(CustomGuardrail, CustomBatchLogger):
                 )
             else:
                 raise TypeError(
-                    f"Cannot normalize tool_call of type {type(tc).__name__}: {tc!r}"
+                    f"Cannot normalize tool_call of type {type(tc).__name__}"
                 )
         return result