Webhook Worker May Log GH Personal Access Key

[actionsflow]

Webhook Worker May Log GH Personal Access Key

[theowenyoung]

Thanks for your interest in Actionsflow! I've actually started a new workflow project in the last few years: Denoflow: https://github.com/denoflow/denoflow , which runs in Deno and is also configured with yaml, but is simpler to use and more self-hosted, so if you're interested too, feel free to give it a try! Here's an online playground

Again, any suggestions would be very helpful to me!

[theowenyoung]

Thanks for reporting the secure issue, @thadk , I reviewed the related code, and yes, it seemed that if an error occurred, the sensitive information will be send to sentry.

I'm sorry for this, I made this worker code from another boilerplate, I also checked the sentry dashboard, fortunately, there is nothing reported yet!

Cause the code has been running for over one year, now I'll totally remove the log, and sentry error report.

The code has been deployed to Worker, actionsflow/webhook2github@2147c98

You can also run your own self-hosted webhook bridge version.

Thanks again for the report!

[thadk]

Thanks much for the fast response and the underlying functionality which I hadn't seen elsewhere! Had been looking for it for some time. I'll try to write up my experience setting the cloud flare worker up in a PR in case anyone else feels like they want to.