Skip to content

Implement keyring - protect the credentials file with a password #2

Description

@unfor19

Currently, the ~/.githubsecrets/credentials file is not protected with any password. This is a minor security risk because this means that the personal-access-tokens are compromised only if your local machine is hacked.

Even though it's a minor security risk, I'd like to implement keyring, which means - the ~/.githubsecrets/credentials file is now encrypted and can only be decrypted by using keyring.

Note - when using Docker / CI processes, the keyrings.alt is used

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions