Skip to content

Privacy/Security concern: make it clear that a report file is uploaded to https://semaphoreci.com/ #74

@thromera

Description

@thromera

I was exploring the codebase of this gem, and I noticed the module InsightsUploader, which uploads a report file to https://semaphoreci.com. (https://github.com/renderedtext/test-boosters/blob/master/lib/test_boosters/insights_uploader.rb#L20 )

If we focus only on the RSpec generated reports, the formatter adds all text contained in the "examples", AND the comments below the examples.
Example:

context 'my first context' do
  # This is a comment to explain my test 
  it 'does something' do
  end
end

reports

# Not sure of the finale uploaded file, it's basically a custom RSpec formatter. 
{
  context: {
    text: 'my first context',
    childs: [{
      it: {
        comment: 'This is a comment to explain my test',
        text: 'does something'
      }
    }]
  }
}

Reporting might be fine, as long as:

  • It is explicit for the user that data is being used, what data is exported, what's the point of exporting that data
  • there is an option to disable the reporting.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions