devtron
devtron copied to clipboard
Feature: Masking of secrets in build logs
🔖 Feature description
Masking of global secrets in build logs
🎤 Pitch / Usecases
The exposure of a global secret in build logs poses a significant security risk. When utilizing secrets within pre-build, post-build, or Docker steps that involve displaying the value, measures should be implemented to mask the secret and prevent its visibility in logs.
UseCase : The secrets are visible if set -x
is used in the script, and we echo $secret
within a file.
🔄️ Alternative
No response
👀 Have you spent some time to check if this issue has been raised before?
- [X] I checked and didn't find similar issue
🏢 Have you read the Code of Conduct?
- [X] I have read the Code of Conduct
AB#9806