Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

It's an anti pattern to allow providing sensitive data via CLI options.
The best practice is to only allow a bool option at best and read the
actual secret from stdin instead. Otherwise sensitive data easily leaks
into proc, as argv is never secret but available on the whole system.

In this case we even print the struct in debug mode, which may lead to
disclosing and logging tokens in the journal as well.

For now we do it simple by just allowing env vars for the token, in case
we really want to allow for alternative way we can add a bool option and
read it from stdin instead.

Levente Polyak authored 1 year ago and Levente Polyak committed 1 year ago

Use backon and check for GraphQL returned errors, which happen to have
successful HTTP calls. We use a closure now to retry the operation for
both, failed HTTP calls as well as errors in GraphQL.

Default with exponential backoff (max times 3, delay 1s, factor 2)

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

fix(deps): update rust crate indicatif to 0.17.5

See merge request !162

fix(deps): update all non-major dependencies

See merge request !161

fix(deps): update all non-major dependencies

See merge request !160

Levente Polyak authored 1 year ago and Leonidas Spyropoulos committed 1 year ago

Authored-by: Levente Polyak <anthraxx@archlinux.org>
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

chore(schema): update graphql schema to gitlab 16.x

See merge request !159

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

fix(deps): update rust crate clap to 4.3.0

See merge request !158

fix(deps): update rust crate reqwest to 0.11.18

See merge request !157

fix(deps): update rust crate serde to 1.0.163

See merge request !156

fix(deps): update rust crate tokio to 1.28.1

See merge request !155

fix(deps): update a bunch of dependencies

See merge request !154

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Update dependencies:
- serde to 1.0.162
- anyhow to 1.0.71
- reqwest to 0.11.17
- clap to 4.2.7
- tokio to 1.28.0

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

fix(deps): update rust crate clap to 4.2.4

See merge request !148

fix(deps): update rust crate clap to 4.2.3

See merge request !147