[FEATURE] Hide secrets from logs when running command with `doppler run --hide-secrets `
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 396
- Forks
- 83
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 3
Description
Is your feature request related to a problem? Please describe.
When using doppler on Github Actions with a command like doppler run -- printenv your secrets will be leaked in the Github actions logs
Usually Github Actions replaces Github Actions secrets with **** in the logs, but if you use doppler you won't have this feature
This is also useful if you are streaming on Twitch and want to show your terminal logs safely
Describe the solution you'd like
When running doppler run --hide-secrets replace all doppler secrets instances with **** characters
Describe alternatives you've considered
Additional context
It would also be useful to add the option --show SECRET_NAME to allow some secrets to be shown, useful if you are storing non sensitive data in doppler and want to show them in logs
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the CLI entry point for doppler run and trace how command output is handled. The feature is done when --hide-secrets masks Doppler secret values as **** in output, with the requested --show SECRET_NAME behavior defined and covered by relevant CLI tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100