From 128a489ba0866f1d6fa7475c089f233a708b93d3 Mon Sep 17 00:00:00 2001
From: blam <ben@blam.sh>
Date: Wed, 19 Jan 2022 17:18:30 +0100
Subject: [PATCH] chore: delete the secrets when claiming the task so we don't
 store anything locally

Signed-off-by: blam <ben@blam.sh>
---
 .../src/scaffolder/tasks/DatabaseTaskStore.ts                   | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/plugins/scaffolder-backend/src/scaffolder/tasks/DatabaseTaskStore.ts b/plugins/scaffolder-backend/src/scaffolder/tasks/DatabaseTaskStore.ts
index 813d8d0f5b..369da5662e 100644
--- a/plugins/scaffolder-backend/src/scaffolder/tasks/DatabaseTaskStore.ts
+++ b/plugins/scaffolder-backend/src/scaffolder/tasks/DatabaseTaskStore.ts
@@ -139,6 +139,8 @@ export class DatabaseTaskStore implements TaskStore {
         .update({
           status: 'processing',
           last_heartbeat_at: this.db.fn.now(),
+          // remove the secrets when moving moving to processing state
+          secrets: undefined,
         });
 
       if (updateCount < 1) {