[LRUG] VCR caches

[Ed James]

It’s very easy to leak private information in VCR cassette files. I too have made this mistake, with AWS credentials no less (yikes!).
Always always always read your VCR cassette files carefully before committing them. Not doing so is the same as committing code you’ve not read :)

Good luck.


       	Ed James 
I will respect your spam <mailto:ed.james.spam at gmail.com>

> On 11 Sep 2018, at 16:44, Matthew Rudy Jacobs <matthewrudyjacobs at gmail.com> wrote:
> 
> As it happens VCR cassettes accept ERB tags.
> 
> So I once wrote a script to regenerate cassettes using real credentials,
> then right afterwards replace the credentials in the cassettes with an ERB reference.
> 
> It's risky that you'll mess it up,
> but it worked for my needs.
> 
> On Tue, 11 Sep 2018 at 16:32, Toby Privett <toby at snaplab.co.uk <mailto:toby at snaplab.co.uk>> wrote:
> On a tangent, I once let API credentials leak into VCR yaml files. Then pushed them to an open source repo.
> You're probably not doing that, but worth being mindful of the risks
> 
> On Tue, 11 Sep 2018 at 11:07 James Adam <james at lazyatom.com <mailto:james at lazyatom.com>> wrote:
> On 11 Sep 2018, at 10:07, Samuel Joseph <tansaku at gmail.com <mailto:tansaku at gmail.com>> wrote:
>> 
>> I have two concerns
>> 
>> 1) new developers onboarding often get snarled up in the caching and the files generated
> 
> I tend to consider the generated YAML files as black boxes — it’s hard to predict their contents or make much sense of them until you’re quite experienced.
> 
>> 2) the cached recordings are gradually getting further and further out of date - could we automate their refreshing?
> 
> 
> VCR _can_ be configured to automatically re-record after a fixed period of time, would that help? https://relishapp.com/vcr/vcr/v/3-0-3/docs/cassettes/automatic-re-recording <https://relishapp.com/vcr/vcr/v/3-0-3/docs/cassettes/automatic-re-recording>
> 
> — James
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org <mailto:Chat at lists.lrug.org>
> Archives: http://lists.lrug.org/pipermail/chat-lrug.org <http://lists.lrug.org/pipermail/chat-lrug.org>
> Manage your subscription: http://lists.lrug.org/options.cgi/chat-lrug.org <http://lists.lrug.org/options.cgi/chat-lrug.org>
> List info: http://lists.lrug.org/listinfo.cgi/chat-lrug.org <http://lists.lrug.org/listinfo.cgi/chat-lrug.org>
> -- 
> Kind regards,
> 
> Toby Privett
> --------------
> http://snaplab.co.uk <http://snaplab.co.uk/>_______________________________________________
> Chat mailing list
> Chat at lists.lrug.org <mailto:Chat at lists.lrug.org>
> Archives: http://lists.lrug.org/pipermail/chat-lrug.org <http://lists.lrug.org/pipermail/chat-lrug.org>
> Manage your subscription: http://lists.lrug.org/options.cgi/chat-lrug.org <http://lists.lrug.org/options.cgi/chat-lrug.org>
> List info: http://lists.lrug.org/listinfo.cgi/chat-lrug.org <http://lists.lrug.org/listinfo.cgi/chat-lrug.org>
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> Archives: http://lists.lrug.org/pipermail/chat-lrug.org
> Manage your subscription: http://lists.lrug.org/options.cgi/chat-lrug.org
> List info: http://lists.lrug.org/listinfo.cgi/chat-lrug.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20180911/a218216e/attachment-0004.html>