Skip to content

fix(quay): Quay actions template secrets update#2949

Merged
AndrienkoAleksandr merged 6 commits intobackstage:mainfrom
dzemanov:quay-actions-template-update
Mar 6, 2025
Merged

fix(quay): Quay actions template secrets update#2949
AndrienkoAleksandr merged 6 commits intobackstage:mainfrom
dzemanov:quay-actions-template-update

Conversation

@dzemanov
Copy link
Copy Markdown
Contributor

@dzemanov dzemanov commented Feb 19, 2025

Hey, I just made a Pull Request!

  • @backstage-community/plugin-scaffolder-backend-module-quay uses the insecure deprecated ui:widget: password instead of ui:field: Secret. As a result, token can be fully seen on the screen.

Before:
quay-actions-token

After:
quay-actions-fix

Fixes

RHIDP-6081

✔️ Checklist

  • A changeset describing the change and affected packages. (more info)
  • Added or updated documentation
  • Tests for new functionality and regression tests for bug fixes
  • Screenshots attached (for UI changes)
  • All your commits have a Signed-off-by line in the message. (more info)

@dzemanov dzemanov requested review from a team and karthikjeeyar as code owners February 19, 2025 12:07
@dzemanov dzemanov requested a review from awanlin February 19, 2025 12:07
@backstage-goalie
Copy link
Copy Markdown
Contributor

backstage-goalie Bot commented Feb 19, 2025

Missing Changesets

The following package(s) are changed by this PR but do not have a changeset:

  • @backstage-community/plugin-scaffolder-backend-module-quay

See CONTRIBUTING.md for more information about how to add changesets.

Changed Packages

Package Name Package Path Changeset Bump Current Version
@backstage-community/plugin-scaffolder-backend-module-quay workspaces/quay/plugins/quay-actions none v2.5.0

@dzemanov dzemanov changed the title Quay actions template update [quay]: Quay actions template secrets update Feb 19, 2025
@dzemanov dzemanov changed the title [quay]: Quay actions template secrets update fix(quay): Quay actions template secrets update Feb 19, 2025
Signed-off-by: Dominika Zemanovicova <dzemanov@redhat.com>
Signed-off-by: Dominika Zemanovicova <dzemanov@redhat.com>
Signed-off-by: Dominika Zemanovicova <dzemanov@redhat.com>
Signed-off-by: Dominika Zemanovicova <dzemanov@redhat.com>
@dzemanov dzemanov force-pushed the quay-actions-template-update branch from ff0dcad to ba325ef Compare February 28, 2025 16:41
@backstage-goalie
Copy link
Copy Markdown
Contributor

Thanks for the contribution!
All commits need to be DCO signed before they are reviewed. Please refer to the the DCO section in CONTRIBUTING.md or the DCO status for more info.

Signed-off-by: Dominika Zemanovicova <dzemanov@redhat.com>

This reverts commit c9b8e4b0aa20c433f2112d438cfc8f31f52ef12d.

Signed-off-by: Dominika Zemanovicova <dzemanov@redhat.com>
@dzemanov dzemanov force-pushed the quay-actions-template-update branch from ba325ef to 8765d9d Compare February 28, 2025 19:50
Copy link
Copy Markdown
Contributor

@awanlin awanlin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the correction @dzemanov, left one comment about the changeset but going to approve just so I'm not blocking 👍

'@backstage-community/plugin-scaffolder-backend-module-quay': patch
---

Updated insecure `ui:widget: password` used for token field to `ui:field: Secret`
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These files don't ship with the plugin, I'm not sure that we actually need a changeset for this then. Going to leave that up to @karthikjeeyar though 👍

Signed-off-by: Dominika Zemanovicova <dzemanov@redhat.com>

This reverts commit 1e00d49.
@dzemanov
Copy link
Copy Markdown
Contributor Author

dzemanov commented Mar 3, 2025

/cc @CryptoRodeo

Copy link
Copy Markdown
Contributor

@CryptoRodeo CryptoRodeo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@AndrienkoAleksandr AndrienkoAleksandr merged commit 09f4ff7 into backstage:main Mar 6, 2025
@dzemanov dzemanov deleted the quay-actions-template-update branch April 14, 2026 08:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants