Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Only redact the non-sensitive bits of build args and env vars. #182

Merged
merged 2 commits into from
Apr 6, 2023
Merged

Only redact the non-sensitive bits of build args and env vars. #182

merged 2 commits into from
Apr 6, 2023

Conversation

jeremy
Copy link
Member

@jeremy jeremy commented Apr 5, 2023

  • -e [REDACTED]-e SOME_SECRET=[REDACTED]
  • Replaces Utils.redact with Utils.sensitive to clarify that we're indicating redactability, not actually performing redaction.
  • Redacts from YAML output, including mrsk config (fixes "mrsk config" exposes env secrets #96)

* `-e [REDACTED]` → `-e SOME_SECRET=[REDACTED]`
* Replaces `Utils.redact` with `Utils.sensitive` to clarify that we're
  indicating redactability, not actually performing redaction.
* Redacts from YAML output, including `mrsk config` (fixes #96)
@dhh
Copy link
Member

dhh commented Apr 6, 2023

Test failures due to Ruby install?

@intrip
Copy link
Member

intrip commented Apr 6, 2023

#184 should fix CI

* main:
  Bump debug to fix missing deps in CI
@dhh dhh merged commit 2146f6d into basecamp:main Apr 6, 2023
@dhh dhh deleted the sensitive-args branch April 6, 2023 14:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

"mrsk config" exposes env secrets
3 participants