vito / bass

a low fidelity scripting language for project infrastructure
https://bass-lang.org
MIT License
378 stars 13 forks source link

Dagger secrets #269

Closed vito closed 1 year ago

vito commented 1 year ago

Uses Dagger's new secrets API, supporting secret mounts and env. :tada:

This brings the Dagger runtime tests down to just 3 failures: TLS, mounting subpaths of cache mounts, and using OCI image archives for thunks.

There's a slight concession here: the runtime test suite no longer asserts that secrets passed in commandline args are safe from being leaked in the image. Dagger doesn't support it, and you shouldn't be passing secrets in command args anyway.

cc @dolanor :)