3 ms·
Couldn't the agent post then the key in some public comment?
by messh 2mo ago
Couldn't the agent post then the key in some public comment?
- roywiggins 2mo agoOnly if the replacement is global and not, say, only looking and inserting it into the actual (eg) Authorization header. If something is only transparently altering the Authorization header, then an agent inserting the dummy value somewhere else is totally safe.
- mikesir87 2mo agoFor clarity, there is no "search and replace" function going on. It's only setting the header. The main reason a "proxy-managed" env var is set is because most CLI tools assume if the env var is set, auth is set. If the env var is unset, it will assume auth needs to occur. Fortunately, most don't do a pattern matching on what the value actually is.