search

golang / gddo

Go Doc Dot Org
https://godoc.org
BSD 3-Clause "New" or "Revised" License
1.1k stars 267 forks source link

security: logs github token at boot #659

Open nickatsegment opened 4 years ago

nickatsegment commented 4 years ago

In its default configuration, gddo-server dumps all config values to logs, including sensitive values like the GitHub token

Seems like https://github.com/golang/gddo/pull/554 would have at least allowed us to turn off debug logging.