tianzixuan/gradle-build-action
1
0
Fork 0
mirror of https://github.com/gradle/gradle-build-action.git synced 2025-11-04 09:58:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

Patch @azure/logger to fix CodeQL warning

Browse Source 
Logging of the AZURE_LOG_LEVEL env var value is considered a security issue,
since any environment variable value could contain sensitive information.
In this case, logging the value is not really necessary.
This commit is contained in:
Daz DeBoer
2022-09-22 09:56:08 -06:00
parent 74a56b60ce
commit c295a4096e
5 changed files with 33 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
dist/post/index.js vendored
View File

@@ -18925,7 +18925,7 @@ if (logLevelFromEnv) {
setLogLevel(logLevelFromEnv);
}
else {
console.error(`AZURE_LOG_LEVEL set to unknown log level '${logLevelFromEnv}'; logging is not enabled. Acceptable values: ${AZURE_LOG_LEVELS.join(", ")}.`);
console.error(`AZURE_LOG_LEVEL set to unknown log level; logging is not enabled. Acceptable values: ${AZURE_LOG_LEVELS.join(", ")}.`);
}
}
/**

2
dist/post/index.js.map vendored
View File

File diff suppressed because one or more lines are too long