question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Coming from docker/build-push-action#53

Refs:

  • docker/login-action#25
  • docker/github-actions#21
  • actions/starter-workflows#96

Behaviour

https://github.com/docker/build-push-action/issues/53#issuecomment-721898162 It seems that the warning message is hidden from the users, which is misleading as it provides a false feeling of security. As seen in docker/login-action@adb7347/src/docker.ts#L36, on success stderr is not shown. The warning is precisely shown when the login is successful but insecure.

Steps to reproduce this issue

https://github.com/docker/build-push-action/issues/53#issuecomment-721898162 See eine/login-action@master (commits) and eine/login-action/runs/1354438643?check_suite_focus=true#step:3:8.

Expected behaviour

Login is secure or security warnings are not hidden.

Actual behaviour

Login is reported not to be secure, but warnings are hidden.

Issue Analytics

  • State:open
  • Created 3 years ago
  • Reactions:1
  • Comments:8 (5 by maintainers)

github_iconTop GitHub Comments

2reactions
clarkbwcommented, Nov 13, 2020

I’ve asked for this before. I’ll push for it again.

1reaction
crazy-maxcommented, Dec 22, 2020

@eine @clarkbw actions/virtual-environments#2304 has been merged. Will be available ~January (https://github.com/actions/virtual-environments/issues/2302#issuecomment-749140395).

Read more comments on GitHub >

github_iconTop Results From Across the Web

Security Issues report - Search Console Help - Google Support
The Security Issues report lists indications that your site was hacked, or behavior on your site that could potentially harm a visitor or...
Read more >
Top 15 Most Common Security Issues and How to Fix Them
1. Ransomware Attack · 2. Code Injection (Remote Code Execution) · 3. Cross-Site Scripting (XSS) Attack · 4. Data Breach · 5. Malware...
Read more >
Security issue definition and meaning - Collins Dictionary
Security issue definition: An issue is an important subject that people are arguing about or discussing . | Meaning, pronunciation, translations and ...
Read more >
10 Common Web Security Vulnerabilities - Toptal
Don't suffer through a security breach—take action before any problems arise. Master these 10 common web security vulnerabilities now.
Read more >
Configuring issue-level security - Atlassian Documentation
Issue security levels are created within issue security schemes and let you control which user or group of users can view an issue....
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found