devtron icon indicating copy to clipboard operation
devtron copied to clipboard

Feature: Masking of secrets in build logs

Open kamal-devtron opened this issue 9 months ago • 0 comments

🔖 Feature description

Masking of global secrets in build logs

🎤 Pitch / Usecases

The exposure of a global secret in build logs poses a significant security risk. When utilizing secrets within pre-build, post-build, or Docker steps that involve displaying the value, measures should be implemented to mask the secret and prevent its visibility in logs. UseCase : The secrets are visible if set -x is used in the script, and we echo $secret within a file.

🔄️ Alternative

No response

👀 Have you spent some time to check if this issue has been raised before?

  • [X] I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

AB#9806

kamal-devtron avatar May 15 '24 10:05 kamal-devtron