vsts-agent-d-sec: better security around .Credentials

ppanyukov / vso-agent-docker

This project is now closed and not needed. See README

0 stars 0 forks source link

Closed ppanyukov closed 8 years ago

ppanyukov commented 8 years ago

do not keep .Credentials file after agent starts
prevents stealing credentials even if someone manages to exec into running container
just changing permissions on file is not sufficient in docker containers