Ayush KumarandGitHub 5d19a031fa Fix: do not log or persist credentials embedded in Terraform module remote URLs (#7201) ...

The remote URL of a Terraform module can embed credentials (for example
https://user:token@host/repo.git). The cache-reuse logic logged the raw URL
and wrote it to the .remote-url cache marker, which could leak those
credentials into controller logs and onto disk.

Strip the userinfo from the URL before logging it and before writing the cache
marker. The marker now stores a credential-free URL and the reuse check
compares the same stripped form, so cache reuse and re-clone-on-change behave
as before while no secret is persisted.

Signed-off-by: Ayush Kumar <65535504+roguepikachu@users.noreply.github.com>

2026-06-25 09:52:44 +01:00

..

testdata/definition

Feat: support to manage the configs by the CLI, UI, and workflow. (#4794)

2022-10-17 17:15:45 +08:00

capability_config_test.go

Merge commit from fork

2026-06-10 09:24:29 -07:00

capability_fifo_test.go

Merge commit from fork

2026-06-10 09:24:29 -07:00

capability_integrate_test.go

Chore: (deps): Update k8s to 1.29 (#6654)

2025-01-03 07:54:42 +08:00

capability_suite_test.go

Refactor: use cuex engine (#6575)

2024-07-27 17:44:20 +08:00

capability_test.go

Fix: do not log or persist credentials embedded in Terraform module remote URLs (#7201)

2026-06-25 09:52:44 +01:00

capability.go

Fix: do not log or persist credentials embedded in Terraform module remote URLs (#7201)

2026-06-25 09:52:44 +01:00

utils_test.go

Chore: remove legacy rollout and scope (#6068)

2023-06-05 10:57:38 +08:00

utils.go

Chore: remove schematic kube and helm (#6099)

2023-06-12 10:41:02 +08:00