Skip to content

Conversation

@m4dcoder
Copy link
Contributor

@m4dcoder m4dcoder commented Oct 23, 2022

Add backward compatibility to secret masking introduced in #5319 to prevent security-relative issues. Migration to the new schema is required to take advantage of the full output schema validation.

A new output schema using full JSON schema was introduced and secrets
previously masked using the legacy output schema now being displayed as
plain text. To prevent security relative issues, add backward
compatibility to secret masking. Full output schema validattion will
need to be migrated to the new schema.
@pull-request-size pull-request-size bot added the size/M PR that changes 30-99 lines. Good size to review. label Oct 23, 2022
@m4dcoder m4dcoder requested a review from cognifloyd October 23, 2022 01:09
Copy link
Member

@cognifloyd cognifloyd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you adjust the name of the test (legacy is no longer "noop") and clean up the comment that says nothing will be masked?

@arm4b arm4b added this to the 3.8.0 milestone Oct 24, 2022
@m4dcoder
Copy link
Contributor Author

ok. I'll update the changelog and description here.

@m4dcoder m4dcoder changed the title Add backward compatibility to secret masking for legacy output schema Add backward compatibility to secret masking for prev version of output schema Oct 26, 2022
@m4dcoder m4dcoder changed the title Add backward compatibility to secret masking for prev version of output schema Add backward compatibility to secret masking for prev ver of output schema Oct 26, 2022
@m4dcoder m4dcoder changed the title Add backward compatibility to secret masking for prev ver of output schema Add backward compatibility to secret masking for output schema Oct 26, 2022
@m4dcoder m4dcoder requested review from arm4b and cognifloyd October 26, 2022 04:55
Copy link
Member

@cognifloyd cognifloyd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I cleaned up the test name.

Copy link
Member

@arm4b arm4b left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the changes!

@cognifloyd cognifloyd merged commit 2b4e359 into master Oct 26, 2022
@cognifloyd cognifloyd deleted the fix-output-secret-masking branch October 26, 2022 15:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/M PR that changes 30-99 lines. Good size to review.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants