这是indexloc提供的服务,不要输入任何密码
Skip to content

[BUG] Make environment values sensitive? #351

@holbrookab-bond

Description

@holbrookab-bond

Describe the bug

Hi,

I think the linked line creates a security flaw in that a value that should be sensitive can get displayed in terraform's state. Can this be uncommented?

https://github.com/vercel/terraform-provider-vercel/blob/main/vercel/resource_project_environment_variables.go#L98-L101

To Reproduce

Run a plan with vercel_project_environment_variables resource and set an environment variable to sensitive.

Check the plan's state. You can see the variable there.

Terraform and Vercel Provider Version

Terraform v1.9.8
on darwin_arm64
+ provider registry.terraform.io/vercel/vercel v3.5.2

Additional Details

No response

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions