Don't inject API key as env var #256

New issue

Open

opened 2022-06-17 20:21:59 +02:00 by Jef Roosens · 0 comments

Jef Roosens commented

2022-06-17 20:21:59 +02:00

Owner

Injecting the API key using an env var might actually be a security risk, because this means malicious PKGBUILDs could try extracting it. There's no reason to add it as an env var as it can just be substituted in the script before running.

Jef Roosens added the

enhancement

label 2022-06-17 20:21:59 +02:00

This repository is archived. You cannot comment on issues.

No labels

No milestone

No project

No assignees

1 participant

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: vieter-v/vieter#256

No description provided.

Rows
Columns