arhill05/backstage-plugin-scaffolder-backend-module-slack

Slack variables visible in Dev Tools

Closed this issue · 0 comments

I spotted that when using DevTools the following config variables:

slack:
  webhookUrl: "https://example.com"
  token: ${SLACK_TOKEN}
  conversationId: ABC123
  conversationName: general

Are visible in plain text - I think a change like this will resolve it - add a config.d.ts file at root

export interface Config {
  slack: {
    /**
       * @visibility backend
       */
    webhookUrl: string;
    /**
       * @visibility secret
       */
    token: string;
    /**
       * @visibility backend
       */
    conversationId: string;
    /**
       * @visibility backend
       */
    conversationName: string;
    };
  };
}

And then add it to packages.json

...
"files": [
    "dist",
    "config.d.ts"
  ],
  "configSchema": "config.d.ts"
  ...

I followed these guides

See here for why it must be done: