Skip to content
This repository has been archived by the owner on Aug 4, 2023. It is now read-only.

Don't allow secrets passed on the CLI #25

Open
svenstaro opened this issue Jun 29, 2020 · 0 comments
Open

Don't allow secrets passed on the CLI #25

svenstaro opened this issue Jun 29, 2020 · 0 comments

Comments

@svenstaro
Copy link

You currently allow for passing secrets on the CLI like so:

prometheus-pingdom-exporter server <USERNAME> <PASSWORD> <API-KEY>

This is insecure as other users can see this in ps aux. You should strongly prefer passing this as env vars instead which others users can't see as easily.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant