The GitHub Actions job "Tests (AMD)" on airflow.git/connection-test-host-secrets has succeeded. Run started by GitHub user pierrejeambrun (triggered by pierrejeambrun).
Head commit for run: fa4cc7ea736bb00b4c9b82c279aba839a0597177 / pierrejeambrun <[email protected]> Skip stored credentials when a connection test overrides host or port The POST /connections/test endpoint restores an existing connection's stored credentials (password/extra) when the request sends the masked sentinel, so a saved connection can be tested without re-typing secrets. Connection configuration users have write-only access to those credentials and are not meant to view them; reusing them while the request points at a caller-supplied host or port applies them against a destination the caller chose rather than the connection's own, which is outside the intent of the retype-free test flow. Scope the credential reuse to requests that keep the stored connection's host and port. Follows the same hardening as #67620. Report URL: https://github.com/apache/airflow/actions/runs/29501947831 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
