Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mask each line of multi-line secrets #208

Merged
merged 6 commits into from
May 5, 2021
Merged

Conversation

tomhjp
Copy link
Contributor

@tomhjp tomhjp commented Apr 30, 2021

Closes #205.

When fetching multi-line secrets from Vault, the secret was not being properly registered with GH actions for masking in the output logs. See the linked issue for full details - the fix itself is fairly trivial.

Still todo:

  • Run some real infrastructure tests to confirm the fix
  • [ ] Determine whether the large index.js diff is problematic, looks like I probably have some different local versions installed to the previous builder

@tomhjp tomhjp requested review from tvoran and jasonodonnell April 30, 2021 15:30
@tvoran
Copy link
Member

tvoran commented May 1, 2021

FWIW, I think we usually wait to commit dist/index.js until a release.

Copy link
Contributor

@jasonodonnell jasonodonnell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, but @tvoran is right, please remove the compiled index.js changes and we'll do that when we're ready to release.

@jasonodonnell jasonodonnell self-requested a review May 4, 2021 12:38
Copy link
Contributor

@jasonodonnell jasonodonnell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Co-authored-by: Jason O'Donnell <[email protected]>
Copy link
Member

@tvoran tvoran left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems to work for me 👍

@tomhjp tomhjp merged commit 3526e1b into master May 5, 2021
@tomhjp tomhjp deleted the mask-multi-line-secrets branch May 5, 2021 10:54
@jasonodonnell jasonodonnell mentioned this pull request May 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Exposes secrets in plaintext
3 participants