gradle/gradle-build-action
1
0
Fork 0
mirror of https://github.com/gradle/gradle-build-action.git synced 2024-11-23 01:22:50 +00:00
Code Issues Projects Releases Packages Wiki Activity
gradle-build-action/patches/@azure+logger+1.0.4.patch

27 lines
1.3 KiB
Diff
Raw Normal View History

Patch @azure/logger to fix CodeQL warning Logging of the AZURE_LOG_LEVEL env var value is considered a security issue, since any environment variable value could contain sensitive information. In this case, logging the value is not really necessary.
2022-09-22 15:56:08 +00:00
diff --git a/node_modules/@azure/logger/dist-esm/src/index.js b/node_modules/@azure/logger/dist-esm/src/index.js
NPM dependency updates * Update development dependencies * Update runtime dependencies
2023-03-25 19:05:25 +00:00
index cc25720..2925db5 100644
Patch @azure/logger to fix CodeQL warning Logging of the AZURE_LOG_LEVEL env var value is considered a security issue, since any environment variable value could contain sensitive information. In this case, logging the value is not really necessary.
2022-09-22 15:56:08 +00:00
--- a/node_modules/@azure/logger/dist-esm/src/index.js
+++ b/node_modules/@azure/logger/dist-esm/src/index.js
@@ -20,7 +20,7 @@ if (logLevelFromEnv) {
setLogLevel(logLevelFromEnv);
}
else {
- console.error(`AZURE_LOG_LEVEL set to unknown log level '${logLevelFromEnv}'; logging is not enabled. Acceptable values: ${AZURE_LOG_LEVELS.join(", ")}.`);
+ console.error(`AZURE_LOG_LEVEL set to unknown log level; logging is not enabled. Acceptable values: ${AZURE_LOG_LEVELS.join(", ")}.`);
}
}
/**
diff --git a/node_modules/@azure/logger/dist/index.js b/node_modules/@azure/logger/dist/index.js
NPM dependency updates * Update development dependencies * Update runtime dependencies
2023-03-25 19:05:25 +00:00
index 81e97c3..a0e14d8 100644
Patch @azure/logger to fix CodeQL warning Logging of the AZURE_LOG_LEVEL env var value is considered a security issue, since any environment variable value could contain sensitive information. In this case, logging the value is not really necessary.
2022-09-22 15:56:08 +00:00
--- a/node_modules/@azure/logger/dist/index.js
+++ b/node_modules/@azure/logger/dist/index.js
NPM dependency updates * Update development dependencies * Update runtime dependencies
2023-03-25 19:05:25 +00:00
@@ -125,7 +125,7 @@ if (logLevelFromEnv) {
Patch @azure/logger to fix CodeQL warning Logging of the AZURE_LOG_LEVEL env var value is considered a security issue, since any environment variable value could contain sensitive information. In this case, logging the value is not really necessary.
2022-09-22 15:56:08 +00:00
setLogLevel(logLevelFromEnv);
}
else {
- console.error(`AZURE_LOG_LEVEL set to unknown log level '${logLevelFromEnv}'; logging is not enabled. Acceptable values: ${AZURE_LOG_LEVELS.join(", ")}.`);
+ console.error(`AZURE_LOG_LEVEL set to unknown log level; logging is not enabled. Acceptable values: ${AZURE_LOG_LEVELS.join(", ")}.`);
}
}
/**
Reference in a new issue Copy permalink