Don't warn for unencrypted KEY_ID patterns

MeltwaterArchive · Jun 9, 2016 · 2f117ab · 2f117ab
1 parent b1e3ef2
commit 2f117ab
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/src/lighter/main.py b/src/lighter/main.py
@@ -86,7 +86,7 @@ def process_env(filename, verifySecrets, env):
 
         # Check for unencrypted secrets
         if (('password' in key.lower() or 'pwd' in key.lower() or 'key' in key.lower() or 'token' in key.lower()) and
-                'public' not in key.lower()) and len(secretary.extractEnvelopes(value)) == 0:
+                'public' not in key.lower() and 'id' not in key.lower()) and len(secretary.extractEnvelopes(value)) == 0:
             if verifySecrets:
                 raise RuntimeError('Found unencrypted secret in %s: %s' % (filename, key))
             else:

diff --git a/src/resources/yaml/staging/myservice-encrypted-password.yml b/src/resources/yaml/staging/myservice-encrypted-password.yml
@@ -7,6 +7,7 @@ override:
   env:
     SERVICE_VERSION: '%{lighter.version}'
     SERVICE_BUILD: '%{lighter.uniqueVersion}'
+    AWS_ACCESS_KEY_ID: '123abc'
     DATABASE_PASSWORD: 'ENC[NACL,deadbeef]'
     CVAR: '%{cvar}'
     NEW_RELIC_APP_NAME: '%{newrelic.appname.prefix} MyService'