daytonaio/daytona

make it optional to show lines with env vars when creating workspace

Opened this issue · 5 comments

Now when you create a workspace log that you see while it is created contains all env vars. This is inconvenient as user can accidentally leak the env vars if he is screen sharing/recording or just pasting logs to support.

We can use the secrets-file option of the devcontianer CLI which will mask the env vars in the output.

This still doesn't eliminate risk if we keep the way things are now?

This still doesn't eliminate risk if we keep the way things are now?

I'm saying that we should implement adding env vars to devcontainers using the secrets-file option as part of this issue. This will eliminate the risk of env vars leaking into the logs.

i want to contribute on this issue , please assign me @nkkko

@29deepanshutyagi no need to get assigned, feel free to work on the issue.