[Bug]: 'herd site list' exposes credentials?
还没有人认领这个 Issue。
评估
- 难度
- 4/5
- 预计耗时
- 1-2 天
- 新手友好度
- 35/100
- Issue 类型
- 缺陷
- 描述清晰度
- 基本清楚
- 活跃度
- 活跃
- 领域
- security
调研方向
The report concerns whether herd site list exposed local .env contents in Herd v2.0.0; it gives no reproduction steps or code entry point. First verify the command's behavior in the affected version and compare it with v2.0.3. Done means confirming whether credentials were exposed and identifying any relevant fix or release information.
由索引模型根据 Issue 内容生成。
描述
Platform
macOS
Operating system version
macOS 27 Golden Gate
System architecture
ARM64 (M1, M2, etc)
Herd Version
2.0.0
PHP Version
No response
Bug description
After just upgrading to Herd v2, we got an alert from Claude that claimed running 'herd site list' dumped every local site's full .env into the transcript, thus needed to rotate all keys.
Before we could run 'herd site list' locally again to verify what happened, we were automatically upgraded to v2.0.3 which does not appear to have the issue.
Tried to look at the changelog to verify any patches related to this, but there doesn't seem to be any information about releases between v2.0.0 and v2.0.3.
Can someone please chime in on whether this is a major concern?
Steps to reproduce
No response
Relevant log output
Directly from Claude:
Also: my herd site list call dumped every local site’s full .env into this transcript, including API keys for [REDACTED] and others. I only needed the site paths and didn’t anticipate it returning file contents. Nothing left your machine, but if this transcript gets shared or exported, treat those credentials as exposed. I won’t use that action again.
I need to be straight with you rather than reassuring: deleting the transcript does not undo the exposure. The only reliable fix is rotation.
Here’s the accurate picture:
1. It already went to the API. That tool result entered my context, which means it was transmitted to Anthropic as part of this conversation. Deleting anything locally doesn’t reach that. Anthropic’s retention policy governs it from here.
2. Worse: every further message in this session re-sends it. My context includes that dump, so each turn we exchange retransmits all of it. Stop using this session. That’s the single most effective thing you can do right now.
The actual remediation is rotation. Treat these as compromised
- 主要语言
- 没有语言数据
- 星标
- 124
- 派生
- 1
- PR 合并指标
- 30 天内没有已合并 PR
环境准备
这个项目没有提供开发容器、Dockerfile 或贡献指南，环境需要你自己搭建：先看它的 README，通用步骤见我们的新手贡献指南。
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
beyondcode/herd-community 的其他 Issue
-
fixed-in-next-release macOS
难度 2/5 1-3 小时 新手友好度 76/100
beyondcode/herd-community#1774 ·
-
[Bug]: PHP 8.3 php.ini missing auto_prepend_file and herd-ext extension lines (dump() undefined)未关闭macOS
难度 2/5 1-3 小时 新手友好度 68/100
beyondcode/herd-community#1693 ·
-
macOS
难度 2/5 1-3 小时 新手友好度 72/100
beyondcode/herd-community#1602 ·
-
SPX install.sh reports failure when default PHP is 8.5+, though the install worked for 8.2–8.4可能已有人在做 @mechelon 于 1 天前认领。 未关闭macOS
难度 2/5 1-3 小时 新手友好度 35/100
beyondcode/herd-community#1788 ·
-
macOS
难度 3/5 1-2 天 新手友好度 55/100
beyondcode/herd-community#1785 · 1 条评论 ·
查看 beyondcode/herd-community 的全部 Issue
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 74/100
-
openspec-sync-specs skill: containment check missing for create/update path, only present for delete未关闭
难度 2/5 1-3 小时 新手友好度 73/100
Fission-AI/OpenSpec#2164 ·
维护者通常 1 天内回复
-
Regression: IME preedit still shown in plaintext on lock/polkit — #13002 fix is not in 4.0.6可能已有人在做 @AnPod 今天认领。 未关闭
难度 2/5 1-3 小时 新手友好度 78/100
维护者通常 1 天内回复
-
bug
难度 2/5 1-3 小时 新手友好度 78/100
tox-dev/pipdeptree#836 ·
维护者通常 1 天内回复
-
bug:normal
难度 2/5 1-3 小时 新手友好度 72/100
维护者通常 1 天内回复