Add Secure Environment Support for Compose and Application Resources
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 37.4k
- Forks
- 3k
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 73
Description
What problem will this feature address?
Currently, environment variables for compose and application resources are stored and displayed in plain text. This poses a significant security risk for secrets such as DB passwords, API keys, etc. Users need an option to encrypt environment variables
Describe the solution you'd like
1.Add a "Secure Mode" toggle UI for environments on compose/application screens.
2.Encrypt only for UI display; never store encrypted envs in DB.
3.When envs are updated/saved, all values are decrypted before sending to backend.
Describe alternatives you've considered
Additional context
No response
Will you send a PR to implement it?
Yes
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the compose and application resource screens and their environment update/save flow. The completed work should provide a Secure Mode toggle, encrypt values only for UI display, decrypt all values before backend submission, and ensure encrypted values are not stored in the database.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker-compose, typescript
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100