From 9c46554cc1085597228bfe692dcbab2adc242965 Mon Sep 17 00:00:00 2001
From: Ole Langbehn <ole.langbehn@inoio.de>
Date: Wed, 12 Mar 2025 18:01:48 +0100
Subject: [PATCH] fix: remove commented out security incident code, replace
with warning
---
.gitlab-ci.yml | 4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 8d418d2..b8ba17f 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -23,9 +23,7 @@ default:
- 1cpu-4gb # default small, configure more explicitly on specific jobs
before_script:
- set -e
- # env -0 | sort -z | tr '\0' '\n': Sort env output alphabetically, keeping multiline variables intact
- # egrep: Remove sensitive information from the output of env
- #- env -0 | sort -z | tr '\0' '\n' | egrep -ve '^(DOCKER_AUTH_CONFIG|GOOGLE_APPLICATION_CREDENTIALS)=.*'
+ # DANGER don't use `set -x` or print the environment via e.g. `env` in pipeline runs, this might leak credentials (has leaked them)
stages:
- prepare
--
GitLab