#Dagger secrets information leaking

1 messages ยท Page 1 of 1 (latest)

cyan marten
#

Hello Folks ๐Ÿ™‚

We are using dagger 0.13.0 engine/sdk and have been utilizing WithSecretVariable api form go sdk. We recently found that secrets information being leaked into some places

  1. trace spans sent to honeycomb
  2. container logs

Could you please guide us how to mask these information?

fickle kraken
#

hm, do you have an example of some code that causes this issue? it shouldn't be getting into those places if you're using WithSecretVariable

cyan marten
#
for key, value := range *params.SecretEnvVariables {
  container = container.WithSecretVariable(key, a.client.SetSecret(key, value))
}```
fickle kraken
#

yeah, i mean more of a complete example - secrets should be removed from the container logs, we have tests for this - if you're seeing secrets in traces/container logs, then i need a more complete example

#

do you use the secret values without the WithSecretVariable anywhere?

cyan marten
#

do you use the secret values without the WithSecretVariable anywhere?
no, we use a common func shared above