stackdriver-tools icon indicating copy to clipboard operation
stackdriver-tools copied to clipboard

The tile config leaks the service-account because it's not marked as a credential

Open bengtrj opened this issue 6 years ago • 0 comments

Context:

Tile version: 2.1.0 (current latest) When exporting the OpsManager state so we can back it up, our automatic credential detector did detect a credential.

    ".properties.service_account": {
      "configurable": true,
      "credential": false, <--this-should-be-true
      "optional": false,
      "type": "text",
      "value": "MANUALLY-REDACTED"
    },

This exposes the service account json and should be avoided.

bengtrj avatar Feb 14 '19 16:02 bengtrj