search

cats-oss / fastlane-plugin-firebase_test_lab_android

Test your app with Firebase Test Lab with ease using fastlane for Android
MIT License
48 stars 8 forks source link

Option to prevent exposing test result to the public #20

Open manicmaniac opened 2 years ago

manicmaniac commented 2 years ago

With download_dir option, the plugin set test result files public-read, which permits non-authorized users to access the files.

https://github.com/cats-oss/fastlane-plugin-firebase_test_lab_android/blob/9082337cc39f956852eb2b6fd598025e4211da0b/lib/fastlane/plugin/firebase_test_lab_android/actions/firebase_test_lab_android_action.rb#L56

Generally test result doesn't include sensitive information but it would be nice if the plugin has option that prevents files from setting public-read ACL.

vsgopinath commented 11 months ago

@wasabeef Is it possible to remove this and update to new version? I am also experiencing this security issue.