Have a secret in .gitignore /.ssh

[commjoen]

• Create a branch with added secret in .gitignore and a secret in .ssh
• Create the challenges for both where the secrets for both files are having their own separate challenge with encryption of the secrets to hide them from detection engines.

[ArslanYM]

Is this issue open ?

[commjoen]

Yes, @ArslanYM it is . Want to have a stab at it?

[ArslanYM]

Yes please. Thanks

[commjoen]

Welcome to the team @ArslanYM ! Please have a look at https://github.com/OWASP/wrongsecrets/blob/master/CONTRIBUTING.md for how to implement a challenge and the required tests :) . Feel free to reach out via Slack if you have any questions!

[ArslanYM]

Thanks @commjoen , Can you send me the slack link too.

[commjoen]

Need support? Contact us via OWASP Slack for which you sign up here

[ArslanYM]

@commjoen This will sound like a dumb question but how do I add a secret in .ssh?

[commjoen]

That does not sound like a dumb question at all! https://linuxize.com/post/using-the-ssh-config-file/?utm_content=cmp-true shows a nice example where the identity file mentioned would be the secret ;) .

[commjoen]

Hello @ArslanYM do you have any progress on this :) ?

[divyanshuagarwal-23]

Hello @commjoen I will like to pick this one up
I am new contributor

[divyanshuagarwal-23]

Please assign this to me

[commjoen]

We will reassign this issue in case there is no response within a week :-)

[divyanshuagarwal-23]

ok thank you, I will be available

[commjoen]

@divyanshuagarwal-23 can you please select an unassigned issue first ;-) ?

[divyanshuagarwal-23]

sure @commjoen

[ArslanYM]

@commjoen Sorry for the delay. Il start working on this.

[AnuRage-git]

Greetings! Can I have updates regarding the state of this issue?

[za]

Hi @commjoen I have initiated a PR. Might need your help on how to implement the challenge though.

[commjoen]

@za the issue is still assigned to @ArslanYM. Please don't do this. closing your MR.

[za]

oh OK, I thought it's idle and no one is getting it @commjoen

[commjoen]

@ArslanYM are you making progress with this :) ? We are getting beyond the 3 months period listed in https://github.com/OWASP/wrongsecrets/blob/master/CONTRIBUTING.md#how-to-get-your-pr-accepted .

[commjoen]

@za it is idle now :) good sir, are you still interested in taking on this issue good sir?

[za]

Hi @commjoen I'll take this issue first before proceed with devcontainer #702