makes
makes copied to clipboard
To-expire secret builtin
Developers usually have to deal with broken jobs due to expired secrets (usually API tokens). Ideally, all tokens should be automatically rotated, but this is hard (sometimes even impossible) to do.
From Makes it would not be possible for us to support builtins for rotating tokens for X, Y and Z stacks.
I propose creating a generic builtin for tracking token expiration dates:
validateSecretExpiration = {
integrates = {
expirationDate = "01/08/2020";
minimumDaysToExpire = 7;
};
bugsnag = {...};
};
That way developers would be forced to rotate the token by the CI before it expires.