Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

bk-cli auth login 支持从 stdin or 环境变量中获取票据

Closed
#27 4 comments 0 reactions 1 assignee View on GitHub

Maintainers usually reply within 1 day

@robot-wklken is already working on this.

Since Oct 15, 2026.

  • #28 by @robot-wklken — merged

Assessment

This issue has not been assessed yet.

Description

将 token 拼接到命令行参数 --access_token= 中,会导致敏感令牌出现在进程命令行(如 /proc//cmdline、ps 输出)中,存在凭据泄露风险。建议改为通过环境变量、标准输入或临时配置文件传递 token(若 bk-cli 支持),避免明文出现在参数列表中。


优先确认下,从环境变量 login 的方式是否能规避这个风险,如果可以,bk-cli 目前是否支持,应该做什么?

注意,目前有多种票据登录

确认下,先不改代码提 PR

Dominant language
Go
Stars
7
Forks
6
Avg merge
2d 19h
Merged PRs (30d)
14

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from TencentBlueKing/bk-cli

All issues in TencentBlueKing/bk-cli

Similar issues

More Go issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.