You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Passing account keyfile passwords as command line options is poor security practice. And while it is true that a user can avoid this by storing the pwd in an environment variable (eg key.password=$(ORACLE_PWD)), the readme and --help document the poor practice of passing plain text pwds on the command line.
I recommend removing key.password and have the autoracle look for the password in a specific environment variable. If no such variable is found, prompt user for the pwd at runtime (using a terminal library that doesn't echo the user input).
The text was updated successfully, but these errors were encountered:
Passing account keyfile passwords as command line options is poor security practice. And while it is true that a user can avoid this by storing the pwd in an environment variable (eg
key.password=$(ORACLE_PWD)
), the readme and--help
document the poor practice of passing plain text pwds on the command line.I recommend removing
key.password
and have theautoracle
look for the password in a specific environment variable. If no such variable is found, prompt user for the pwd at runtime (using a terminal library that doesn't echo the user input).The text was updated successfully, but these errors were encountered: