sugarcrm-developers / school

Professor M's School for Gifted Coders
Apache License 2.0
20 stars 19 forks source link

Figure out better password handling for build automation scripts #53

Open lschaefer-sugarcrm opened 6 years ago

lschaefer-sugarcrm commented 6 years ago

From @mmarum-sugarcrm in https://github.com/sugarcrm/school/pull/44:

There are some general security concerns with passing passwords over command line. (ex. they get exposed in process table when a user calls ps and exposed in shell history) This is probably less a concern when you are running these commands in short lived Docker containers but there could be logging going on that would be storing the password. We should open a ticket for supporting alternative methods in future. https://www.netmeister.org/blog/passing-passwords.html

Related to #51