Skip to content

Atlantis posts Bitbucket token when there is a connection error #615

@kipkoan

Description

@kipkoan

We had a brief network blip that caused Atlantis to not be able to connect to our Bitbucket server.

Atlantis then commented on the PR, and that comment included the full Bitbucket token:

fatal: unable to access 'https://atlantis:LfKycJ4Wmx8HJH5eWCdWExKm9v2SmHWwwS8NWXpkzkC5@bitbucket.example.com/scm/anatf/my-repository.git/': OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to bitbucket.example.com:443 
: exit status 128

Expected: Atlantis should redact the token and not post it in a PR comment.

(Note: that is not the real token we are using... I generated a new one for demonstration.)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions