mptyl/ThothII
1
0
Fork 0
Code Issues 25 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix(security): reject invalid optional bundle values

Browse Source
This commit is contained in:
marcopan
2026-07-12 11:53:15 +02:00
parent 449a333365
commit f67d2c97d8
3 changed files with 13 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/core-entrypoint.sh
+10 -4
View File
@@ -58,8 +58,12 @@ if [ -n "$bundle" ]; then
load_bundle_env() {
env_name=$1
key=$2
value=$(read_bundle_secret "$bundle" "$key" 2>/dev/null || true)
if [ -n "$value" ]; then export "$env_name=$value"; fi
if value=$(read_bundle_secret "$bundle" "$key" 2>/dev/null); then
export "$env_name=$value"
else
status=$?
[ "$status" -eq 3 ] || { echo "secret bundle contains an invalid $key value" >&2; exit 2; }
fi
}
load_bundle_env THT_DWH_API_KEY THT_DWH_API_KEY
load_bundle_env THT_VEC_API_KEY THT_VEC_API_KEY
@@ -75,11 +79,13 @@ if [ -n "$bundle" ]; then
materialize_password() {
env_name=$1
key=$2
value=$(read_bundle_secret "$bundle" "$key" 2>/dev/null || true)
if [ -n "$value" ]; then
if value=$(read_bundle_secret "$bundle" "$key" 2>/dev/null); then
file="$secret_tmp_dir/$key"
printf '%s' "$value" >"$file"
export "$env_name=$file"
else
status=$?
[ "$status" -eq 3 ] || { echo "secret bundle contains an invalid $key value" >&2; exit 2; }
fi
}
materialize_password THT_VECTOR_BOOTSTRAP_PASSWORD_FILE THT_VECTOR_BOOTSTRAP_PASSWORD