Don't inject API key as env var #256

Open
opened 2022-06-17 20:21:59 +02:00 by Jef Roosens · 0 comments
Owner

Injecting the API key using an env var might actually be a security risk, because this means malicious PKGBUILDs could try extracting it. There's no reason to add it as an env var as it can just be substituted in the script before running.

Injecting the API key using an env var might actually be a security risk, because this means malicious PKGBUILDs could try extracting it. There's no reason to add it as an env var as it can just be substituted in the script before running.
Commenting is not possible because the repository is archived.
No milestone
No project
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
vieter-v/vieter#256
No description provided.