diff --git a/docs/docs/20-usage/40-secrets.md b/docs/docs/20-usage/40-secrets.md index 81811daeb..e87a04384 100644 --- a/docs/docs/20-usage/40-secrets.md +++ b/docs/docs/20-usage/40-secrets.md @@ -70,9 +70,11 @@ Secrets are not exposed to pull requests by default. You can override this behav Please be careful when exposing secrets to pull requests. If your repository is open source and accepts pull requests your secrets are not safe. A bad actor can submit a malicious pull request that exposes your secrets. ::: -## Image filter +## Plugins filter -To prevent abusing your secrets from malicious usage, you can limit a secret to a list of images. If enabled they are not available to any other plugin (steps without user-defined commands). If you or an attacker defines explicit commands, the secrets will not be available to the container to prevent leaking them. +To prevent abusing your secrets from malicious usage, you can limit a secret to a list of plugins. If enabled they are not available to any other plugin (steps without user-defined commands). If you or an attacker defines explicit commands, the secrets will not be available to the container to prevent leaking them. + +![plugins filter](./secrets-plugins-filter.png) ## Adding Secrets diff --git a/docs/docs/20-usage/secrets-plugins-filter.png b/docs/docs/20-usage/secrets-plugins-filter.png new file mode 100644 index 000000000..460d852fb Binary files /dev/null and b/docs/docs/20-usage/secrets-plugins-filter.png differ diff --git a/web/src/assets/locales/en.json b/web/src/assets/locales/en.json index 530a8f0fd..d5d586f41 100644 --- a/web/src/assets/locales/en.json +++ b/web/src/assets/locales/en.json @@ -422,9 +422,9 @@ "deleted": "Secret deleted", "created": "Secret created", "saved": "Secret saved", - "images": { - "images": "Available for the following images", - "desc": "List of images where this secret is available, leave empty to allow for all images." + "plugins": { + "images": "Available only for the following plugins", + "desc": "List of plugins images where this secret is available, leave empty to allow for all plugins and general steps." }, "events": { "events": "Available at the following events", diff --git a/web/src/components/secrets/SecretEdit.vue b/web/src/components/secrets/SecretEdit.vue index 81aca0963..18d79b5d7 100644 --- a/web/src/components/secrets/SecretEdit.vue +++ b/web/src/components/secrets/SecretEdit.vue @@ -21,8 +21,8 @@ /> - - {{ $t('secrets.images.desc') }} + + {{ $t('secrets.plugins.desc') }}