bk-cli auth login 支持从 stdin or 环境变量中获取票据
Maintainers usually reply within 1 day
Assessment
This issue has not been assessed yet.
Description
将 token 拼接到命令行参数 --access_token= 中,会导致敏感令牌出现在进程命令行(如 /proc//cmdline、ps 输出)中,存在凭据泄露风险。建议改为通过环境变量、标准输入或临时配置文件传递 token(若 bk-cli 支持),避免明文出现在参数列表中。
优先确认下,从环境变量 login 的方式是否能规避这个风险,如果可以,bk-cli 目前是否支持,应该做什么?
注意,目前有多种票据登录
确认下,先不改代码提 PR
- Dominant language
- Go
- Stars
- 7
- Forks
- 6
- Avg merge
- 2d 19h
- Merged PRs (30d)
- 14
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from TencentBlueKing/bk-cli
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
TencentBlueKing/bk-cli#42 ·
Maintainers usually reply within 1 day
-
Difficulty 5/5 Over a week Newbie friendliness 32/100
TencentBlueKing/bk-cli#33 ·
Maintainers usually reply within 1 day
-
Difficulty 5/5 Over a week Newbie friendliness 28/100
TencentBlueKing/bk-cli#32 ·
Maintainers usually reply within 1 day
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
TencentBlueKing/bk-cli#31 ·
Maintainers usually reply within 1 day
-
agent 安全与执行治理Open
Difficulty 5/5 Over a week Newbie friendliness 35/100
TencentBlueKing/bk-cli#8 · 1 comment ·
Maintainers usually reply within 1 day
All issues in TencentBlueKing/bk-cli
Similar issues
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Maintainers usually reply within 1 day
-
Mend: dependency security vulnerability
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
kube-tarian/sigrun#202 ·
-
good first issue help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
eugenioenko/ttt#1085 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
fullsend-ai/fullsend#8688 · 1 comment ·
Maintainers usually reply within 1 day
-
question raised-by:verifier
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
medici-finance/assay#4013 ·
Maintainers usually reply within 1 day