fosrl / fosrl/cli

CLI doesn't have config file like olm

Open
#42 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
49
Forks
18
Avg merge
2d 8h
Merged PRs (30d)
7

Description

### Describe the Bug

This is a security issue as the client id and secret are always available in `/proc//environ` or in `ps` output.

### Environment

- OS Type & Version: (e.g., Ubuntu 22.04) Any Linux distro
- Pangolin Version: Latest
- Gerbil Version: Latest
- Traefik Version: Latest
- Newt Version: Latest
- Client Version: (if applicable)

### To Reproduce

Run pangolin CLI as per the docs provided (including systemd unit) on site, check ps auxf | grep -i pangolin output

### Expected Behavior

If this is going to be used for config on Linux machines, there needs to be a mechanism for passing secrets that doesn't expose on CLI or otherwise

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.