wrongsecrets icon indicating copy to clipboard operation
wrongsecrets copied to clipboard

Published 20 hours ago • verified publisher icon OWASP

Have a secret in .gitignore /.ssh

Open commjoen opened this issue 2 years ago • 23 comments

  • [ ] Create a branch with added secret in .gitignore and a secret in .ssh
  • [ ] Create the challenges for both where the secrets for both files are having their own separate challenge with encryption of the secrets to hide them from detection engines.

commjoen avatar Feb 13 '23 05:02 commjoen

Is this issue open ?

ArslanYM avatar Jul 24 '23 11:07 ArslanYM

Yes, @ArslanYM it is . Want to have a stab at it?

commjoen avatar Jul 24 '23 11:07 commjoen

Yes please. Thanks

ArslanYM avatar Jul 24 '23 11:07 ArslanYM

Welcome to the team @ArslanYM ! Please have a look at https://github.com/OWASP/wrongsecrets/blob/master/CONTRIBUTING.md for how to implement a challenge and the required tests :) . Feel free to reach out via Slack if you have any questions!

commjoen avatar Jul 24 '23 11:07 commjoen

Thanks @commjoen , Can you send me the slack link too.

ArslanYM avatar Jul 24 '23 11:07 ArslanYM

Need support? Contact us via OWASP Slack for which you sign up here

commjoen avatar Jul 24 '23 16:07 commjoen

@commjoen This will sound like a dumb question but how do I add a secret in .ssh?

ArslanYM avatar Jul 25 '23 14:07 ArslanYM

That does not sound like a dumb question at all! https://linuxize.com/post/using-the-ssh-config-file/?utm_content=cmp-true shows a nice example where the identity file mentioned would be the secret ;) .

commjoen avatar Jul 25 '23 20:07 commjoen

Hello @ArslanYM do you have any progress on this :) ?

commjoen avatar Sep 29 '23 04:09 commjoen

Hello @commjoen I will like to pick this one up I am new contributor

divyanshuagarwal-23 avatar Oct 06 '23 16:10 divyanshuagarwal-23

Please assign this to me

divyanshuagarwal-23 avatar Oct 06 '23 16:10 divyanshuagarwal-23

We will reassign this issue in case there is no response within a week :-)

commjoen avatar Oct 06 '23 16:10 commjoen

ok thank you, I will be available

divyanshuagarwal-23 avatar Oct 06 '23 16:10 divyanshuagarwal-23

@divyanshuagarwal-23 can you please select an unassigned issue first ;-) ?

commjoen avatar Oct 06 '23 17:10 commjoen

sure @commjoen

divyanshuagarwal-23 avatar Oct 12 '23 16:10 divyanshuagarwal-23

@commjoen Sorry for the delay. Il start working on this.

ArslanYM avatar Oct 12 '23 16:10 ArslanYM

Greetings! Can I have updates regarding the state of this issue?

AnuRage-git avatar Jan 05 '24 13:01 AnuRage-git

Hi @commjoen I have initiated a PR. Might need your help on how to implement the challenge though.

za avatar Feb 01 '24 04:02 za

@za the issue is still assigned to @ArslanYM. Please don't do this. closing your MR.

commjoen avatar Feb 01 '24 04:02 commjoen

oh OK, I thought it's idle and no one is getting it @commjoen

za avatar Feb 01 '24 04:02 za

@ArslanYM are you making progress with this :) ? We are getting beyond the 3 months period listed in https://github.com/OWASP/wrongsecrets/blob/master/CONTRIBUTING.md#how-to-get-your-pr-accepted .

commjoen avatar Feb 01 '24 04:02 commjoen

@za it is idle now :) good sir, are you still interested in taking on this issue good sir?

commjoen avatar Feb 11 '24 21:02 commjoen

Hi @commjoen I'll take this issue first before proceed with devcontainer #702

za avatar Feb 13 '24 07:02 za