systeminit / si

The System Initiative software
https://systeminit.com
Apache License 2.0
1.58k stars 261 forks source link

fix: Only allow keypair access from the original workspaceId #4554

Closed vbustamante closed 1 month ago

vbustamante commented 2 months ago

Only allow keypairs to be accessed from their original workspace, to avoid secret leaks. If a secret is unusable when gathering before funcs, the respective before func will be skipped as if the secret was empty.

Also adds UI that shows unusable secrets clearly:

image image image