Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix secret sanitizing for non string values #113

Merged
merged 1 commit into from
Oct 23, 2024

Conversation

danielrbradley
Copy link
Member

  • Use callback instead of fixed value for secret replacement.
  • Find all strings recursively in JSON objects for replacement.
  • Handle difference between gRPC using "value" and state using a "plaintext" string.

Fixes #108

@danielrbradley danielrbradley requested review from thomas11 and a team October 20, 2024 00:46
@danielrbradley danielrbradley self-assigned this Oct 20, 2024
Copy link
Contributor

@thomas11 thomas11 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Workflow failure due to my recent change in #3651 but otherwise LGTM

pulumitest/sanitize/sanitize.go Show resolved Hide resolved
- Use callback instead of fixed value for secret replacement.
- Find all strings recursively in JSON objects for replacement.
- Handle difference between gRPC using "value" and state using a "plaintext" string.
@danielrbradley danielrbradley merged commit 1c91af6 into main Oct 23, 2024
2 checks passed
@danielrbradley danielrbradley deleted the fix-recursive-sanitize branch October 23, 2024 19:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Secret scrubbing should maintain JSON schema
2 participants