Issue 282: a secret on a command line is kept in the runtime's events #160

Merged
mesh-admin merged 1 commits from issue/282-a-secret-on-a-command-line into main 2026-10-06 23:40:55 +00:00
1 Commits
Author SHA1 Message Date
jochen 124943bdc3 Issue 282: a secret on a command line is kept in the runtime's events
mesh/merge-gate pass: the change touches no module of the mesh's graph
mesh/repo-check pass: its merge-check.sh passed
mesh/delivery delivered
The mosquitto module passed its broker's admin password to every docker
exec as an argument, which the container runtime records in its events.
Records the cause, the other modules found doing the same, the fix
proposed in mesh-catalog #100, and where the leaked value went.
2026-10-07 01:38:37 +02:00