Some of my builds and plugins use personal deployment credentials (sometimes they are read from the file system, sometimes they are entered and stored in memory through InteractionService).
Although this may be overly complex, I try to minimize the attack surface of software that uses confidential information, and it feels like poor hygiene to run the server, even on a local host or UNIX socket, without the need for these assemblies.
I was looking for a parameter that could be set in a plugin that would disable the server starting if it was not canceled by the assembly. So far, nothing of the kind has been found. Is there such a setting?
Many thanks!
Update: With Eugene Yokota, starting with sbt 1.1.1, a logical installation now exists autoStartServer. Build and plugins can prevent the server from starting by installing autoStartServer := false. (Users can still manually start the server by starting startServerif they wish.)
source
share