whatwg/html-build

--password warning

Closed this issue · 2 comments

This is output from Travis, not sure where it originates from:

WARNING! Using --password via the CLI is insecure. Use --password-stdin.
WARNING! Your password will be stored unencrypted in /home/travis/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

The first is fixable using the last technique in https://stackoverflow.com/a/51518255/3191. It's kind of dumb because that technique is basically doing the same thing as what we're doing, just bypassing the warning.

The second seems trickier.

The new docker login action implemented in whatwg/wattsi#135 does indeed fix this. I'll work on implementing that in html-build, although it's still on Travis, so that'll be a bit of a process.