Option or formatter to not echo the actual secret to stdout
See original GitHub issueSummary
Option/formatter to not echo the actual secret to stdout.
Basic example
/ # secretlint --format silent secret.txt
/secret.txt
1:0 error [BasicAuth] found basic auth credential @secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth
✖ 1 problem (1 error, 0 warnings)
silent is maybe not the best name for this as it is not really silent. Maybe stylish_without_secrets
?
Motivation
We are using secretlint in GitLab CI, when we commit and push secrets this job will fail. We known that we then have to remove the commit as this contains secret, but due to the nature of the current formatters we also need to delete the job and maybe the secrets are also logged somewhere? We’d rather only have the location of the secret in the logs.
Issue Analytics
- State:
- Created 2 years ago
- Comments:7 (4 by maintainers)
Top Results From Across the Web
Why does Popen.communicate() return b'hi\n' instead of 'hi'?
The b indicates that what you have is bytes , which is a binary sequence of bytes rather than a string of Unicode...
Read more >Difference between 'ls' and 'echo $(ls)' - Unix StackExchange
The first executes ls which, as I understand, appends the contents of the current working directory to the stdout file (which is what...
Read more >How to use Echo Command in Linux (With Examples)
The echo command in Linux is used to print out a string of text you provide as the output. Here is how to...
Read more >Stdout output plugin | Logstash Reference [8.5] - Elastic
A simple output which prints to the STDOUT of the shell running Logstash. This output can be quite convenient when debugging plugin ...
Read more >Define variables - Azure Pipelines | Microsoft Learn
When you set a variable in the UI, that variable can be encrypted and set as secret. User-defined variables can be set as...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
Top Related Hashnode Post
No results found
Top GitHub Comments
Works as advertised 👍 Thanks!
Thanks to confirm! 👍