jenkins-x-plugins / jenkins-x-plugins/jx-gitops
Leak: `jx gitops helmfile report` exposes helm repo credentials when used with private `helm-git` repo
Open
- Dominant language
- Go
- Stars
- 35
- Forks
- 53
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 7
Description
I noticed that `jx gitops helmfile report` when ran against a a helmfile that contains releases that are pulled in through the `helm-git` plugin results in `docs/releases.yaml` containing secrets, like this example:
`repositoryUrl: git+https://myUser:myPAT@gitlab.com/myCorp/gitlab-runner-helm@?ref=v0.48.0&sparse=0`
Please advise of any work around.
Thank you.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.