You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
gitops_checkout resource exposes Github API Key in state file in repo parameter. If you do terraform state show on gitops_checkout resource, you will get something like this:
# module.harness.gitops_checkout.checkout_repo:
resource "gitops_checkout" "checkout_repo" {
branch = "master"
head = "91b80636b2b1cb425b9e8718270458f53c7fe267"
id = ".tmp.tcp-harness-config"
path = ".tmp.tcp-harness-config"
repo = "https://tcp-infrastructure:<github api key>@github.com/tyler-technologies/tcp-harness-config.git"
retry_count = 10
retry_interval = 5
}
At the very least this parameter needs to be made sensitive. Or, ideally, strip username and api key information from state period. There is no need for it.
gitops_checkout resource exposes Github API Key in state file in repo parameter. If you do terraform state show on gitops_checkout resource, you will get something like this:
At the very least this parameter needs to be made sensitive. Or, ideally, strip username and api key information from state period. There is no need for it.
thanks,
Albert Sheynkman