nsrb
3e4d5f443d
- Added SCRUNNER_SECRETS_KEY to README as a required variable for production. - Implemented redaction of sensitive information in logs across various components. - Enhanced script execution functions to include an owner parameter for better secret management. - Introduced a secrets API in the script sandbox for retrieving and managing secrets. - Updated UI components to support owner selection for script execution and secret management.
28 lines
690 B
JavaScript
28 lines
690 B
JavaScript
/**
|
|
* @param {import("knex").Knex} knex
|
|
*/
|
|
export async function up(knex) {
|
|
await knex.schema.createTable("secrets", (t) => {
|
|
t.text("id").primary();
|
|
t.text("owner").notNullable();
|
|
t.text("name").notNullable();
|
|
t.text("ciphertext").notNullable();
|
|
t.text("iv").notNullable();
|
|
t.text("auth_tag").notNullable();
|
|
t.text("created_at").notNullable();
|
|
t.text("updated_at").notNullable();
|
|
t.unique(["owner", "name"]);
|
|
});
|
|
|
|
await knex.schema.raw(
|
|
"CREATE INDEX secrets_owner_name_idx ON secrets (owner, name)",
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @param {import("knex").Knex} knex
|
|
*/
|
|
export async function down(knex) {
|
|
await knex.schema.dropTableIfExists("secrets");
|
|
}
|