{"action":"created","issue":{"url":"https://api.github.com/repos/bitrise-io/steps-slack-message/issues/40","repository_url":"https://api.github.com/repos/bitrise-io/steps-slack-message","labels_url":"https://api.github.com/repos/bitrise-io/steps-slack-message/issues/40/labels{/name}","comments_url":"https://api.github.com/repos/bitrise-io/steps-slack-message/issues/40/comments","events_url":"https://api.github.com/repos/bitrise-io/steps-slack-message/issues/40/events","html_url":"https://github.com/bitrise-io/steps-slack-message/issues/40","id":336039388,"node_id":"MDU6SXNzdWUzMzYwMzkzODg=","number":40,"title":"hey","user":{"login":"bootstraponline","id":1173057,"node_id":"MDQ6VXNlcjExNzMwNTc=","avatar_url":"https://avatars0.githubusercontent.com/u/1173057?v=4","gravatar_id":"","url":"https://api.github.com/users/bootstraponline","html_url":"https://github.com/bootstraponline","followers_url":"https://api.github.com/users/bootstraponline/followers","following_url":"https://api.github.com/users/bootstraponline/following{/other_user}","gists_url":"https://api.github.com/users/bootstraponline/gists{/gist_id}","starred_url":"https://api.github.com/users/bootstraponline/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bootstraponline/subscriptions","organizations_url":"https://api.github.com/users/bootstraponline/orgs","repos_url":"https://api.github.com/users/bootstraponline/repos","events_url":"https://api.github.com/users/bootstraponline/events{/privacy}","received_events_url":"https://api.github.com/users/bootstraponline/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-06-27T00:46:24Z","updated_at":"2018-06-27T14:20:29Z","closed_at":null,"author_association":"NONE","body":"- https://app.bitrise.io/build/60c59afb1ba28d0e\r\n\r\n![image](https://user-images.githubusercontent.com/1173057/41946724-d50710ec-7981-11e8-9613-9af521c5b1de.png)\r\n![image](https://user-images.githubusercontent.com/1173057/41946731-de832d22-7981-11e8-9f0a-5d3b8c0f314b.png)\r\n\r\nSlack token is leaking on `version: 2.7.3` of the step.\r\n\r\n😭 "},"comment":{"url":"https://api.github.com/repos/bitrise-io/steps-slack-message/issues/comments/400689077","html_url":"https://github.com/bitrise-io/steps-slack-message/issues/40#issuecomment-400689077","issue_url":"https://api.github.com/repos/bitrise-io/steps-slack-message/issues/40","id":400689077,"node_id":"MDEyOklzc3VlQ29tbWVudDQwMDY4OTA3Nw==","user":{"login":"godrei","id":12427060,"node_id":"MDQ6VXNlcjEyNDI3MDYw","avatar_url":"https://avatars2.githubusercontent.com/u/12427060?v=4","gravatar_id":"","url":"https://api.github.com/users/godrei","html_url":"https://github.com/godrei","followers_url":"https://api.github.com/users/godrei/followers","following_url":"https://api.github.com/users/godrei/following{/other_user}","gists_url":"https://api.github.com/users/godrei/gists{/gist_id}","starred_url":"https://api.github.com/users/godrei/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/godrei/subscriptions","organizations_url":"https://api.github.com/users/godrei/orgs","repos_url":"https://api.github.com/users/godrei/repos","events_url":"https://api.github.com/users/godrei/events{/privacy}","received_events_url":"https://api.github.com/users/godrei/received_events","type":"User","site_admin":false},"created_at":"2018-06-27T14:20:29Z","updated_at":"2018-06-27T14:20:29Z","author_association":"MEMBER","body":"Hi @bootstraponline ,\r\nto be honest, in this case your webhook url appears in the slack server's response. We need to print this response for debugging. In general we have no controll over every service and tool's messages and responses, so this kind of security issue can be solved by the secret filtering feature of the bitrise cli: https://github.com/bitrise-io/bitrise/blob/master/CHANGELOG.md#release-notes-2"}}
{"actor":{"display_login":"godrei"}}