Hey, when setting up webhooks on the OSS Broker, is there any way to protect Credentials that need to be passe in the URL, like the Pipeline Trigger Token for GitLab Pipelines?
Tim Vahlbrock
01/23/2025, 2:23 PM
The only thing to be protect so far that I found is the password of the basic auth
Tim Vahlbrock
01/23/2025, 2:43 PM
I found that credentials in the headers are also redacted, and that there has been a pull request to redact parts of an url a few years ago (https://github.com/pact-foundation/pact_broker/pull/262) but the later was closed in favor of something else, but I haven't been able to figure out of what.
Tim Vahlbrock
01/23/2025, 2:50 PM
ah. seems like beth wanted to implement a separate 'secrets management' feature, but the branch was never merged.
y
Yousaf Nabi (pactflow.io)
01/23/2025, 5:19 PM
she ended up approaching it a different way which ended up becoming part of PactFlow