Hardening: Secrets Engine does not get jammed when plugins take forever to return secrets

Assessment

This issue has not been assessed yet.

Description

Getting set up

First steps

1. Read the whole issue, then the project's contributing guide.
2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
3. Fork the repository and make your change on a branch.
4. Open a pull request that references the issue number.

More from docker/secrets-engine

• [Feature request] Optional secrets

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  docker/secrets-engine#665 · Opened Sep 25, 2026

• Linux keychain dials a new D-Bus connection per operation, defeating per-entry access confirmation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 42/100

  docker/secrets-engine#648 · 1 comment · Opened Sep 11, 2026

• Docker pass secrets don't work with docker compose build

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 65/100

  docker/secrets-engine#584 · 1 comment · 2 reactions · Opened Jul 14, 2026

• `GetSecretsRequest` carries no caller context, making project-local plugin backends impossible

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  docker/secrets-engine#551 · 2 comments · 3 reactions · Opened Jun 4, 2026

• 3rd party secrets-engine plugin backends

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 30/100

  docker/secrets-engine#534 · 16 comments · 4 reactions · Opened May 28, 2026

All issues in docker/secrets-engine

Similar issues

• talos_machine_configuration drops `searchDomains: domains: []` from a ResolverConfig patch (bump machinery to v1.14.1)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  siderolabs/terraform-provider-talos#414 · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• [Bug]: extract --embedder=model 将 provenance 记录为 flag 字面量 "model" 而非真实模型名

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  Gnosil/semantix#512 · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• `jh git-credential setup` writes `https://*.juliahub.com`, which Julia's LibGit2 cannot parse, breaking Pkg git fetches

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 70/100

  JuliaComputing/jh#63 · 1 comment · Opened Sep 27, 2026

• ReverseProxy path leaves the backend connection open when a backend answers 101 unasked

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area/proxy kind/bug priority/backlog triage/accepted

  Difficulty 2/5 1-3 hours Newbie friendliness 68/100

  lexfrei/cloudflare-tunnel-gateway-controller#840 · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• 🐛 QUIC Hijack() skips the status-written check that HTTP/2 enforces

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Priority: Normal Type: Bug

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  cloudflare/cloudflared#1747 · Opened Sep 27, 2026

More Go issues