Leaks of secrets

Deployment
1

Today, Travis leaks secrets!

Unknown command: npm --api_token=2d0a8d99-...

https://travis-ci.org/falsandtru/spica/jobs/651662343#L393

Looks like this is caused by dpl.

2

Fixed: https://github.com/travis-ci/dpl/issues/1167

3

Since Travis should have leaked secrets also on the other jobs, I think Travis should announce this leak to users.

1 Like
4

Thanks for the report. I advise you to remove the logs, so the other secret doesn’t remain in public review.

5

No worries. I disabled the leaked secret before reporting the incident. The log is left as the evidence of the report. The others of my logs are not secret.