search

heroku / terraform-provider-heroku

Terraform Heroku provider
https://registry.terraform.io/providers/heroku/heroku/latest
Mozilla Public License 2.0
99 stars 75 forks source link

Omit sensitive_config_vars values from TF_LOG=debug output #362

Closed mars closed 1 year ago

mars commented 1 year ago

Discovered this disclosure vulnerability when debugging a Terraform configuration with TF_LOG=debug.

This changes the behavior to output just the heroku_app sensitive_config_vars names and not their values.