git/list[1] front-page[2] threads[3] people[4] search[5] about
 

[PATCH 0/1] git-config --add allows values from stdin

From
ZWZeger-Jan van de Weg <git@zjvandeweg.nl>
Date
Sep 17, 2019, 13:31 UTC
Message-ID
<20190917133135.190145-1-git@zjvandeweg.nl>

When adding or updating configuration values using git-config, the values could all be observed by different processes as these are passed as arguments. In some environments all commands executed are also all logged. When the value contains secrets, this is a side effect that would be great to avoid. At GitLab we use Rugged/libgit2 to circumvent this property[1].

The following patch allows a value to be set through stdin when the user passes a `--stdin` flag.

[1]: https://gitlab.com/gitlab-org/gitaly/blob/8ab5bd595984678838f3f09a96798b149e68a939/ruby/lib/gitlab/git/http_auth.rb#L14-15
Zeger-Jan van de Weg (1):
  Git config allows value setting from stdin
 Documentation/git-config.txt |  5 ++++-
 builtin/config.c             | 23 +++++++++++++++++++++--
 t/t1300-config.sh            | 11 +++++++++++
 3 files changed, 36 insertions(+), 3 deletions(-)

-- 2.23.0

Next: Zeger-Jan van de Weg
Message 1 of 6 in “git-config --add allows values from stdin”
  1. 0/1 git-config --add allows values from stdinZeger-Jan van de Weg, Sep 17, 2019
  2. 1/1 Git config allows value setting from stdinZeger-Jan van de Weg, Sep 17, 2019
  3. Junio C HamanoSep 17, 2019
  4. Taylor BlauSep 22, 2019
  5. Phillip WoodSep 23, 2019
  6. SZEDER GáborSep 23, 2019

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.