More secure credentials

jfrog / jfrog-cli

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products.

https://www.jfrog.com/confluence/display/CLI/JFrog+CLI

Apache License 2.0

531 stars 234 forks source link

More secure credentials #753

Open ruionwriting opened 4 years ago

ruionwriting commented 4 years ago

Example configuration file:

cat ~/.jfrog/jfrog-cli.conf
{
  "artifactory": [
    {
      "url": "https://REDACTED.jfrog.io/REDACTED/",
      "serverId": "REDACTED",
      "isDefault": true,
      "apiKey": "**REDACTED**UHc"
    }
  ],
  "version": "2"
}

Describe the solution you'd like to see

Use os KeyChain and/or also support environment variables.

Describe alternatives you've considered

None that I'm aware of.

eyalbe4 commented 4 years ago

@ruionwriting, We recently added support for sensitive data encryption. Is this something that you'd be interested in using? Our main concern with key chain is that it may prompt for credentials once in a while, and get automation processes stuck while waiting for user input. We're open to any suggestions. Let us know what you think.