code: private static void logValue(final String key, final String value) {
  
          // Fortify will report a violation here because of disclosure of potentially confidential information.
          // However, the configuration keys are not confidential, which makes this a non-issue / false positive.
          if (LOG.isInfoEnabled()) {
              final StringBuilder msg = new StringBuilder("Key found in configuration ('")
                      .append(key)
                      .append("'), using configured value (not disclosed here for security reasons)");
              LOG.info(msg.toString());
          }
  
          // Fortify will report a violation here because of disclosure of potentially confidential information.
          // The configuration VALUES are confidential. DO NOT activate DEBUG logging in production.
          if (LOG.isDebugEnabled()) {
              final StringBuilder msg = new StringBuilder("Key found in configuration ('")
                      .append(key)
                      .append("'), using configured value ('");
              if (value == null) {
                  msg.append("null')");
              } else {
                  msg.append(value).append("')");
              }
              LOG.debug(msg.toString());
          }
      }
docs: Create a log entry when a value has been successfully configured.
  
  @param key   The configuration key
  @param value The value that is being used