Worker: remove secret from env
Open
@josephjclark is already working on this.
Since Sep 18, 2024.
DevX
- Dominant language
- TypeScript
- Stars
- 21
- Forks
- 23
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 17
Description
The worker start script, once the server has started, should delete WORKER_SECRET from the env.
This ensures that once the worker instance has the secret in memory, any attacker on the server can no longer access it.
This also means that the server can't be restarted without the container being destroyed (which is probably good)
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.