CAUTION: This email comes from a non Wind River email account!
Do not click links or open attachments unless you recognize the sender and know the content is safe.
Hi StarlingX community,
Someone reached out on the info email for the project to raise a concern about exposed credentials in the starlingx-staging repo in the jenkins folder.
The person listed a few items that might be of a concern to be stored in the public repository:
* base64-encoded client certificates and private keys
* Cluster configurations referring to kubernetes-admin access
* Kubernetes API endpoints
While these are likely out of concern due to describing a test environment, but I wanted to share the concern if it might still be helpful to look into.
Best Regards,
Ildikó
———
Ildikó Váncsa
Director of Community
Open Infrastructure Foundation