-
Notifications
You must be signed in to change notification settings - Fork 22
Open
Description
| console.log(`##[debug]getAppSettings. Data: ${JSON.stringify(response)}`); |
I just started working with github actions and noticed this call to getAppSettings is logging the response in its entirety into the actions console. This is exposing what would otherwise be secret app settings only accessible from the azure portal. In my particular deployment it is only using this call to warm up kudu before calling the zip deploy.
Could this be configured to be silent? Or is there a different call that could be used for warming up kudu? I notice this call is also used where appsettings are actually needed however it shouldn't log them by default in that case either.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels