DopplerHQ / DopplerHQ/cli

[FEATURE] Hide secrets from logs when running command with `doppler run --hide-secrets `

Open
#326 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
Go
Stars
396
Forks
83
Avg merge
1d 2h
Merged PRs (30d)
3

Description

Is your feature request related to a problem? Please describe.
When using doppler on Github Actions with a command like doppler run -- printenv your secrets will be leaked in the Github actions logs

Usually Github Actions replaces Github Actions secrets with **** in the logs, but if you use doppler you won't have this feature

This is also useful if you are streaming on Twitch and want to show your terminal logs safely

Describe the solution you'd like
When running doppler run --hide-secrets replace all doppler secrets instances with **** characters

Describe alternatives you've considered

Additional context
It would also be useful to add the option --show SECRET_NAME to allow some secrets to be shown, useful if you are storing non sensitive data in doppler and want to show them in logs

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the CLI entry point for doppler run and trace how command output is handled. The feature is done when --hide-secrets masks Doppler secret values as **** in output, with the requested --show SECRET_NAME behavior defined and covered by relevant CLI tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.