The GitHub Actions job "Tests (AMD)" on 
airflow.git/redact-trigger-kwargs-rest-api has failed.
Run started by GitHub user potiuk (triggered by potiuk).

Head commit for run:
974f0a97fce642664fd661d19cba3fb75c3866a3 / Jarek Potiuk <[email protected]>
Redact trigger kwargs in the REST API response

TriggerResponse.kwargs returned the decrypted trigger keyword arguments
verbatim (as a stringified Python dict). Those kwargs can contain
credentials a deferred operator hands to its trigger (an API key, a token),
so the field leaked secrets.

Rather than removing the field (a breaking schema change for API consumers),
keep it but always return it empty as "{}" -- the same value an empty-kwargs
trigger already produced under the previous str() serialization, so the field
type and OpenAPI schema are unchanged. The triggerer still decrypts and uses
the real kwargs at runtime; only the API representation is emptied.

Report URL: https://github.com/apache/airflow/actions/runs/26985584560

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to