Hacker News new | ask | show | jobs
by ivan4th 2701 days ago
There used to be a catch, though, don't know if it's already fixed. If you use this ssh debugging feature you make your secrets world-accessible (anyone can connect to ssh and grab them). This was one of the reasons why I switched to CicleCI, actually (besides their Workflows).
1 comments

Yes, it is indeed correct that if somebody grabs the ssh command with the key while you are debugging, it is accessible. It's something that we want to address in a better way, but other priorities are present right now (build image updates, performance improvements, some new features that we haven't announced yet.) Still, the feedback is appreciated!