search

prometheus-community / PushProx

Proxy to allow Prometheus to scrape through NAT etc.
Apache License 2.0
704 stars 132 forks source link

Remediation for CircleCL security incident #139

Open leonzz opened 1 year ago

leonzz commented 1 year ago

FYI, there's a Jan 04, 2023 CircleCI security alert and this repo could potentially be affected since it uses CircleCI (having a .circleci/config.yaml file). Could the maintainers check the doc and see if any action item is needed?

clushie commented 1 year ago

That's actually a very good point since there are at least contexts configured for pushing the release docker images.

jeroenhabets commented 11 months ago

@SuperQ may have missed your issue @leonzz and comment @clushie

NOTE That he advised to use the community channels for questions in a https://github.com/prometheus-community/PushProx/issues/129#issuecomment-1164101911 last year.

For questions/help/support please use our community channels. There are more people available to potentially respond to your request and the whole community can benefit from the answers provided.