Pass secrets more secure way
Open
documentation
Priority:3
- Dominant language
- C#
- Stars
- 581
- Forks
- 116
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 8
Description
I assume signing happens on the CI pipeline, but many CI pipelines log CLI arguments and output for investigating issues. As a result, secrets may get logged into some storage without the user's knowledge by accident.
I'm wondering could we have another way of passing secrets other than CLI argument.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.