Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Wipe out fetched secrets from Whispr parent process #7

Open
narenaryan opened this issue Nov 1, 2024 · 0 comments
Open

Wipe out fetched secrets from Whispr parent process #7

narenaryan opened this issue Nov 1, 2024 · 0 comments
Assignees
@narenaryan
Labels
enhancement New feature or request security

Comments

@narenaryan
Copy link
Collaborator

Description

Whispr currently updates child process environment variables with fetched secrets, but have no measures to remove them from environment once the child process is spawned.

Actions

  • Create a safe context API for secrets
  • Remove secrets from Whispr process environment once they are passed to the child process.
@narenaryan narenaryan added enhancement New feature or request security labels Nov 1, 2024
@narenaryan narenaryan self-assigned this Nov 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@narenaryan narenaryan

Labels
enhancement New feature or request security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@narenaryan