Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: unset NOTATION_USERNAME and NOTATION_PASSWORD to avoid leaking credentials to plugin #746

Merged
merged 6 commits into from
Jul 20, 2023

Conversation

JeyJeyGao
Copy link
Contributor

Fix:

  • unset credentials env after read the value

Resolves #709
Signed-off-by: Junjie Gao [email protected]

@JeyJeyGao JeyJeyGao marked this pull request as ready for review July 19, 2023 02:57
priteshbandi
priteshbandi previously approved these changes Jul 19, 2023
Copy link
Contributor

@priteshbandi priteshbandi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@codecov-commenter
Copy link

Codecov Report

Merging #746 (97aa497) into main (ce078a9) will increase coverage by 0.48%.
The diff coverage is 100.00%.

❗ Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more.

@@            Coverage Diff             @@
##             main     #746      +/-   ##
==========================================
+ Coverage   63.66%   64.14%   +0.48%     
==========================================
  Files          40       40              
  Lines        2232     2237       +5     
==========================================
+ Hits         1421     1435      +14     
+ Misses        690      681       -9     
  Partials      121      121              
Impacted Files Coverage Δ
cmd/notation/main.go 100.00% <100.00%> (ø)

... and 1 file with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

Copy link
Contributor

@Two-Hearts Two-Hearts left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@priteshbandi priteshbandi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@priteshbandi priteshbandi merged commit 0cc39b3 into notaryproject:main Jul 20, 2023
@shizhMSFT shizhMSFT mentioned this pull request Jul 21, 2023
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Making NOTATION_USERNAME and NOTATION_PASSWORD secure
5 participants