scout-action icon indicating copy to clipboard operation
scout-action copied to clipboard

feature request: do not leak image names that use secrets in github comments

Open pozsa opened this issue 1 year ago • 1 comments

If the image uses a secret the value of the secret is leaked in the github comment.

In the example image below the image reference leaks the value of secrets (if they are used for the image name). In case a secret is used as part of the image name the image reference should display *** for the secrets instead of leaking them.

some examples: ***/scout-demo-service:main, docker/scout-demo-service:***, ***/***:latest

image

pozsa avatar Jul 12 '23 15:07 pozsa

Thank you for reporting this @pozsa, we will have a look at this

mcapell avatar Jul 12 '23 16:07 mcapell