Skip to content

Issues: StackStorm/st2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
15 Open 30 Closed
15 Open 30 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

secrets for python actions capturable in cleartext using ps -ef | grep action_wrapper bug enhancement security
#5997 opened Jul 13, 2023 by fdrab
3
"st2 key load secrets.yaml" prints out secret values to terminal when ran. bug security
#5924 opened Mar 9, 2023 by jonthemango
The secrets are shown in plain text in Rules/Enforcements tab on WebUI bug security
#5809 opened Nov 16, 2022 by yypptest
st2-api-key not obfuscated when using core.http? bug good first issue help wanted security
#5804 opened Nov 14, 2022 by fdrab
3
MongoDB Certificate Authentication bug security
#5759 opened Oct 5, 2022 by bishopbm1
Changes in the hash algorithm database migrations security size/L PR that changes 100-499 lines. Requires some effort to review. status:under discussion
#5161 opened Feb 22, 2021 by ashwini-orchestral • Draft
14
Workflow rerun doesn't inherit protected fields bug component:st2web security
#5146 opened Feb 9, 2021 by minsis
10
Can token in token_d_b stormed in ciphertext ? database enhancement question security status:need more info
#5112 opened Jan 4, 2021 by xieyunyun
2
WebUI shows secrets in plain text on Rules/Enforcements section bug component:st2web security
#4802 opened Oct 17, 2019 by nicholasamorim
password parameters, although marked as secret, are being stored in mongo as clear text enhancement proposal security
#4800 opened Oct 8, 2019 by cballinc
1
Feature Request: Action-Alias private/public flag chatops feature help wanted proposal security
#4559 opened Feb 20, 2019 by nzlosh
5
Nested Key marked as secret in pack config schema showing as plain text in WebGUI bug security
#4448 opened Nov 16, 2018 by namachieli
1
Add "decrypt" param to native st2kv function, deprecate "decrypt_kv" filter complexity:medium documentation enhancement security
#3571 opened Jul 15, 2017 by Mierdin
API key can be created for a nonexistent user bug security
#3366 opened Apr 19, 2017 by m4dcoder
2
Pack Install Doesn't Honor System user, running as root bug security
#3298 opened Mar 22, 2017 by bigmstone
11
ProTip! no:milestone will show everything without a milestone.