Publicly Available Debug Log

My security scans recently starting identifying that there is a publicly available debug log that someone can download.
Logs display this security threat:
“A publicly accessible debug.log file was found in https://www.xxxx.com/wp-content/plugins/loginpress-hide-login/debug.log” (website masked for this posting)

I’m using the Hide Login add-on and prefer to continue using it but would like to know how not to make this log available. I don’t see any options in the Loginpress plugin that allow me to manage debug logs.