App Advisor is not Masking the GitHub Access Token in build-config.json

Products

• VMware Tanzu Spring Runtime

Issue/Introduction

The GitHub Access Token in the generated build-config.json might be masked in some places but visible in plain text in other parts of the configuration.

For example it might be visible under the externalReferences section of the config:

  "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://x-access-token:[email protected]/example-repo/example.git"
        }
      ] 

Environment

Spring App Advisor

Resolution

This bug will be fixed in App Advisor v1.6.5

Additional Information

Application Advisor 1.6 release notes