Skip to content

Documentation about secrets for step condition could elaborate on implications of the approach #18955

Closed as not planned

Description

@m-kuhn

I think this would deserve a hint on the implication that the secret is leaked to every step within the job, regardless if it's required for a certain step or not (hence violating the principle of least privilege).

Originally posted by @m-kuhn in #12722 (comment)

Activity

  1. welcome commented on Jul 8, 2022

    @welcome

    Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

  2. added
    triageDo not begin working on this issue until triaged by the team
    on Jul 8, 2022
  3. cmwilson21 commented on Jul 11, 2022

    @cmwilson21
    Contributor

    @m-kuhn Thanks for opening a new issue for this. I'll get it triaged for review! ⚡

  4. added
    contentThis issue or pull request belongs to the Docs Content team
    actionsThis issue or pull request should be reviewed by the docs actions team
    waiting for reviewIssue/PR is waiting for a writer's review
    and removed
    triageDo not begin working on this issue until triaged by the team
    on Jul 11, 2022
  5. added
    needs SMEThis proposal needs review from a subject matter expert
    on Jul 12, 2022
  6. github-actions commented on Jul 12, 2022

    @github-actions
    Contributor

    Thanks for opening an issue! We've triaged this issue for technical review by a subject matter expert 👀

  7. Benson665 commented on Jul 13, 2022

    @Benson665
  8. github-actions commented on Jul 20, 2022

    @github-actions
    Contributor

    This is a gentle bump for the docs team that this issue is waiting for technical review.

  9. github-actions commented on Jul 28, 2022

    @github-actions
    Contributor

    This is a gentle bump for the docs team that this issue is waiting for technical review.

  10. 12 remaining items

  11. removed
    staleThere is no recent activity on this issue or pull request
    on Dec 5, 2022
  12. github-actions commented on Jan 3, 2023

    @github-actions
    Contributor

    This is a gentle bump for the docs team that this issue is waiting for technical review.

  13. github-actions commented on Feb 1, 2023

    @github-actions
    Contributor

    This is a gentle bump for the docs team that this issue is waiting for technical review.

  14. github-actions commented on Mar 2, 2023

    @github-actions
    Contributor

    This is a gentle bump for the docs team that this issue is waiting for technical review.

  15. github-actions commented on Mar 31, 2023

    @github-actions
    Contributor

    This is a gentle bump for the docs team that this issue is waiting for technical review.

  16. added
    staleThere is no recent activity on this issue or pull request
    and removed
    SME staleThe request for an SME has staled
    on May 31, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    actionsThis issue or pull request should be reviewed by the docs actions teamcontentThis issue or pull request belongs to the Docs Content teamneeds SMEThis proposal needs review from a subject matter expertstaleThere is no recent activity on this issue or pull requestwaiting for reviewIssue/PR is waiting for a writer's review

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions