capistrano-syslog 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 79bbd403c5e09b5f5bcd3014aaedc936bee3971a0a19184f9ca5e2322d21b594
-  data.tar.gz: 826d8270e9d62d4aefb63a78ade7fa68164aafacec030c41b7e505ee00150db1
+  metadata.gz: 982ae54582f0cbcfd52549d7848028aeaa44ea4da954497c685486204038185a
+  data.tar.gz: 34c7c7b5938f58bd7e359f76929dcd4c810d982c65cf775312f957f5ad7e10d6
 SHA512:
-  metadata.gz: 1e2fcd77605bced2a7bbcd47f889a957e64b451bf789d098edbdac5dd50065976eaf5cca1916ed22d4c22a3da4cd87a636d4d907208164f9e3e96e9686c1d4ad
-  data.tar.gz: '096ec1965ac96f8e5c57423d35857e4557afc8c01f59bceab9211bbc13b3b9d387cacd6e783264525134399bf1a8a73cda38665da64c6c6a5b9aca2a0efa803b'
+  metadata.gz: afb3d0e99ce2ee03ef6ff806721087388c216afbfb0dea2ebf1c97106773e36a59a9a14e24f3725af4be8dc283a885527e83c4b3fbd01d6e31f58eaf029cd1dc
+  data.tar.gz: d33e6cc592068932478b805f9e55875a59980c07f3e2604d95d39a1d932aa83c6ff1430d9c9ef5f917fa36a49d728e546339f42dd91b629fb097f14e59ee346e

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+### 0.4.0
+
+ * security fix: mask user/password of repo_url to avoid lealking the credential (e.g. repo_url contains x-oauth-basic )
+
 ### 0.3.0
 
  * behavior change: only syslog on `release_roles`

data/lib/capistrano/syslog/version.rb

@@ -1,5 +1,5 @@
 module Capistrano
   module Syslog
-    VERSION = '0.3.0'
+    VERSION = '0.4.0'
   end
 end

data/lib/capistrano/tasks/syslog.rake

@@ -1,17 +1,39 @@
 namespace :syslog do
 
+  # @return [String]
+  def masked_repo_url
+    repo_url = fetch(:repo_url)
+    if repo_url.match(/\Ahttps/)
+
+      uri = URI.parse(repo_url)
+      if uri.password
+        uri.password = '***'
+      end
+
+      # user is also masked!
+      # e.g. https://password:x-oauth-basic@github.com/example/example.git'
+      if uri.user
+        uri.user = '***'
+      end
+      uri
+    else
+      repo_url
+    end
+  end
+
   set :tag, 'capistrano'
 
   set :starting_format,  -> {
     "deploy starting repository:%s revision:%s" % [
-      fetch(:repo_url),
+      masked_repo_url,
       fetch(:current_revision),
     ]
   }
 
   set :finishing_format, -> {
+    repo_url = fetch(:repo_url)
     "deploy finishing repository:%s revision:%s" % [
-      fetch(:repo_url),
+      masked_repo_url,
       fetch(:current_revision),
     ]
   }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: capistrano-syslog
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - hiboma
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-02-02 00:00:00.000000000 Z
+date: 2021-02-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: capistrano