search

cloudflare / wrangler-action

🧙‍♀️ easily deploy cloudflare workers applications using wrangler and github actions
Apache License 2.0
1.26k stars 159 forks source link

Lack of `accountId` leaks account names and IDs in the logs #288

Closed arunsathiya closed 1 week ago

arunsathiya commented 2 months ago

When I don't supply the accountId param, the wrangler action logs contain the list of all account names and account IDs, along with a More than one account available but unable to select on message.

I am not sure if account IDs are considered sensitive information by Cloudflare, by if they are, there's value in masking them in the logs.

arunsathiya commented 2 months ago

Should I file this on the Workers SDK tracker instead?

shahsimpson commented 1 week ago

Cloudflare doesn't consider the account ID sensitive