feature request: do not leak image names that use secrets in github comments
Open
@mcapell is already working on this.
Since Jul 12, 2023.
enhancement
upstream
- Dominant language
- JavaScript
- Stars
- 141
- Forks
- 53
- PR merge metrics
- No merged PRs in 30d
Description
If the image uses a secret the value of the secret is leaked in the github comment.
In the example image below the image reference leaks the value of secrets (if they are used for the image name).
In case a secret is used as part of the image name the image reference should display *** for the secrets instead of leaking them.
some examples: ***/scout-demo-service:main, docker/scout-demo-service:***, ***/***:latest
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.