Sensitive info in output of `fly apps list`?

1

Hi, I’m building a tool to automate deployments. At one point I run fly apps list, to make sure I’m deploying against the correct app.

I want to log the output of fly apps list --json, but I won’t do that if it might show sensitive information. In my cursory scans of the output on a freshly deployed app, I don’t see any sensitive information. For example my app has 3 secrets, but I only see "Secrets": null, in the output.

Will fly apps list --json ever show sensitive information, or is it okay to log the output?

2

We will never log app secrets in plaintext. I don’t see anything in fly apps list --json that would be considered sensitive.

3

Thanks, that’s really helpful to know.

4

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.