Security issue
See original GitHub issueComing from docker/build-push-action#53
Refs:
Behaviour
https://github.com/docker/build-push-action/issues/53#issuecomment-721898162 It seems that the warning message is hidden from the users, which is misleading as it provides a false feeling of security. As seen in docker/login-action@
adb7347
/src/docker.ts#L36, on success stderr is not shown. The warning is precisely shown when the login is successful but insecure.
Steps to reproduce this issue
https://github.com/docker/build-push-action/issues/53#issuecomment-721898162 See eine/login-action@
master
(commits) and eine/login-action/runs/1354438643?check_suite_focus=true#step:3:8.
Expected behaviour
Login is secure or security warnings are not hidden.
Actual behaviour
Login is reported not to be secure, but warnings are hidden.
Issue Analytics
- State:
- Created 3 years ago
- Reactions:1
- Comments:8 (5 by maintainers)
Top Results From Across the Web
Security Issues report - Search Console Help - Google Support
The Security Issues report lists indications that your site was hacked, or behavior on your site that could potentially harm a visitor or...
Read more >Top 15 Most Common Security Issues and How to Fix Them
1. Ransomware Attack · 2. Code Injection (Remote Code Execution) · 3. Cross-Site Scripting (XSS) Attack · 4. Data Breach · 5. Malware...
Read more >Security issue definition and meaning - Collins Dictionary
Security issue definition: An issue is an important subject that people are arguing about or discussing . | Meaning, pronunciation, translations and ...
Read more >10 Common Web Security Vulnerabilities - Toptal
Don't suffer through a security breach—take action before any problems arise. Master these 10 common web security vulnerabilities now.
Read more >Configuring issue-level security - Atlassian Documentation
Issue security levels are created within issue security schemes and let you control which user or group of users can view an issue....
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
I’ve asked for this before. I’ll push for it again.
@eine @clarkbw actions/virtual-environments#2304 has been merged. Will be available ~January (https://github.com/actions/virtual-environments/issues/2302#issuecomment-749140395).