fsprojects / fsprojects/Paket

Do not require setting proxy password in environment variable

Open
#3,839 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement security
Dominant language
F#
Stars
2.1k
Forks
528
Avg merge
1d 12m
Merged PRs (30d)
54

Description

Description

The FAQ states to use an environment variable with a password in order to authenticate to a proxy. This exposes the user's password to any application with access to the environment variables.

Expected behavior

Although I strongly disagree with the approach of using an environment variable for this purpose, I understand for some use cases this is valid. For users who would prefer to provide credentials at run/build time, please prompt the user for the credentials if they were not provided in the environment variable.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the FAQ guidance and trace how Paket obtains proxy credentials during run or build operations. Determine where authentication is handled when the environment variable is absent; done means users can be prompted for credentials without requiring the password in an environment variable.

Written by the indexing model from the issue text.

Assessment

Tech stack
fsharp
Domain
cli
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.