ephraimbuddy commented on issue #54829: URL: https://github.com/apache/airflow/issues/54829#issuecomment-3220187589
> Ok, having the possibility to set `env` and `config-var` in `extra` would of cause make git-authentication to public repos already possible for experts. > > Why do you think that sending the base64-encoded username+password in a dedicated header to the git-server is a security issue. This string would be build directly from the username and password values provided to the connection and the user would explicitly enable it. I'm not sure how it would be exploited but I feel like each time there's a request, there would be raw headers sent over to the url. Moreover, we use gitpython, if you can help implementing this feature, as you already know how to reproduce it, that would be great. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
