Skip to content

Expanding variables returns sensitive metadata

Cameron Swords requested to merge introduce-variable-type into main

What does this MR do?

Introduces a context.Variable type in place of the structpb.Value. Variable wraps the structpb.Value and provides additional sensitive metadata.

The Expand function in interpolate.go returns a context.Variable. The variable is considered sensitive if it expands an output variable that has been declared sensitive in the step specification. This will be extended in future MRs to consider other kinds of sensitive variables (e.g. environment variables).

A future MR will use the sensitive metadata returned by Expand to ensure that non-sensitive inputs are not derived from sensitive outputs. For the context of how this might be used, see Spike: Non sensitive inputs cannot be created u... (!71 - closed).

Reference

Sensitive outputs can only be given to sensitiv... (#94)

Edited by Cameron Swords

Merge request reports

Loading