Skip to content

cctl: deprecate creds over http#788

Open
crosbymichael wants to merge 1 commit into
apple:mainfrom
crosbymichael:http-cleartext
Open

cctl: deprecate creds over http#788
crosbymichael wants to merge 1 commit into
apple:mainfrom
crosbymichael:http-cleartext

Conversation

@crosbymichael

Copy link
Copy Markdown
Contributor

No description provided.

Signed-off-by: michael_crosby <michael_crosby@apple.com>
var unpackPath: String?

@Flag(help: "Pull via plain text http") var http: Bool = false
@Flag(help: "(DEPRECATED) Pull via plain-text HTTP. Stored credentials will not be used; this flag will be removed in a future release.")

@jglogan jglogan Jul 7, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this flag be deprecated? Or should it just ensure that credentials are not sent?

Suggested change
@Flag(help: "(DEPRECATED) Pull via plain-text HTTP. Stored credentials will not be used; this flag will be removed in a future release.")
@Flag(help: "Pull anonymously via plain-text HTTP")

@Option(help: "Platform string in the form 'os/arch/variant'. Example 'linux/arm64/v8', 'linux/amd64'") var platformString: String?

@Flag(help: "Push via plain text http") var http: Bool = false
@Flag(help: "(DEPRECATED) Push via plain-text HTTP. Stored credentials will not be used; this flag will be removed in a future release.")

@jglogan jglogan Jul 7, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same comment here.

Suggested change
@Flag(help: "(DEPRECATED) Push via plain-text HTTP. Stored credentials will not be used; this flag will be removed in a future release.")
@Flag(help: "Push anonymously via plain-text HTTP.")


@Flag(help: "Use plain text http to authenticate") var http: Bool = false
@Flag(help: "(DEPRECATED) Use plain-text HTTP. Credentials will be transmitted in cleartext; this flag will be removed in a future release.")
var http: Bool = false

@jglogan jglogan Jul 7, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since this is just a tool for lightweight testing, I say we just remove this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants