‹ Reports
The Dispatch

OSS Report: Infisical/infisical


Infisical Faces User Frustration Over Authentication and Integration Bugs

Infisical, an open-source secret management platform, is grappling with user dissatisfaction due to persistent authentication and integration issues, particularly with OAuth2.0 and invite-only signups.

Recent Activity

Recent issues highlight critical bugs and feature requests, with a significant focus on user authentication problems and integration challenges. Notable issues include #2446 regarding invite-only signup malfunctions and #2407 where CLI commands fail to respect domain settings. These indicate pressing gaps in user access controls.

Development Team and Recent Activity

  1. Daniel Hougaard

    • Merged features for audit logs, error boundaries, and server-side pagination.
    • Collaborated with Maidul Islam on dynamic secrets for Azure Entra ID.
  2. Maidul Islam

    • Worked on server-side pagination and UI improvements.
    • Collaborated with Daniel Hougaard on Azure Entra ID integration.
  3. Scott Wilson

    • Implemented UI fixes and error handling improvements.
    • Collaborated on pagination features.
  4. Meet Shah

    • Focused on dynamic secrets integration and documentation enhancements.
  5. Sheen Santos Capadangan

    • Enhanced Slack integration and contributed to UI improvements.
  6. Akhil Mohan

    • Resolved permission-related issues and backend bug fixes.
  7. BlackMagiq (Dangtony98)

    • Contributed to PKI management features and documentation updates.

Of Note

Quantified Reports

Quantify Issues



Recent GitHub Issues Activity

Timespan Opened Closed Comments Labeled Milestones
7 Days 5 11 6 5 1
30 Days 28 28 52 26 1
90 Days 89 80 184 75 1
1 Year 338 197 789 208 9
All Time 748 495 - - -

Like all software activity quantification, these numbers are imperfect but sometimes useful. Comments, Labels, and Milestones refer to those issues opened in the timespan in question.

Quantify commits



Quantified Commit Activity Over 30 Days

Developer Avatar Branches PRs Commits Files Changes
Daniel Hougaard 13 27/29/1 164 218 39935
Sheen 15 25/23/0 71 182 6600
Akhil Mohan 11 17/15/0 34 68 5595
Scott Wilson 1 7/6/0 12 48 4053
Meet Shah 1 6/5/0 14 42 3033
BlackMagiq 5 4/5/0 17 54 1324
Maidul Islam 9 8/7/0 19 39 759
Scott Wilson 1 0/0/0 9 24 749
Snyk bot 1 0/0/0 2 4 451
Vlad Matsiiako 3 3/3/0 4 4 43
Thalles Passos (ThallesP) 2 1/1/0 4 4 12
Sanya Rajan (sanyarajan) 1 1/1/0 1 1 4
injuly (srijan-paul) 1 2/1/1 1 1 4
Luc Didry (ldidry) 0 2/0/0 0 0 0
Kazbek Tokaev (MadEngineX) 0 1/0/0 0 0 0
Lemmy (LemmyMwaura) 0 0/1/0 0 0 0
Mukul Padwal (mukulpadwal) 0 1/1/0 0 0 0
Tom Strong (tomstrong64) 0 1/0/0 0 0 0
Alexander Petree (Apetree100122) 0 0/0/1 0 0 0
Roberto Novelo (RobertoNovelo) 0 1/0/1 0 0 0
Zack_Aayush (AayushSaini101) 0 1/0/0 0 0 0
None (callumfrederiksen) 0 1/0/0 0 0 0

PRs: created by that dev and opened/merged/closed-unmerged during the period

Detailed Reports

Report On: Fetch issues



Recent Activity Analysis

The Infisical project has seen a notable increase in GitHub issue activity, with 253 open issues currently. Recent discussions highlight several critical bugs and feature requests, particularly around integration issues and user authentication problems. A recurring theme is the need for enhanced user experience, especially concerning sign-up processes and integration with external services.

Several issues exhibit significant user frustration, particularly those related to OAuth2.0 sign-ups and the INVITE_ONLY_SIGNUP feature not functioning as intended. This indicates potential gaps in the implementation of user access controls and integration functionalities.

Issue Details

Most Recently Created Issues

  1. Issue #2460: Run Infisical locally

    • Priority: Medium
    • Status: Open
    • Created: 2 days ago
    • Comments: Users report difficulties running locally despite following setup instructions.
  2. Issue #2457: Integration with OCI Vault

    • Priority: Low
    • Status: Open
    • Created: 3 days ago
    • Comments: Feature request for integrating Oracle Cloud Infrastructure Vault for secret management.
  3. Issue #2446: New options for Allow user signups - invite only

    • Priority: High
    • Status: Open
    • Created: 5 days ago
    • Comments: Users express concerns about the lack of an invite-only signup option, which previously existed.
  4. Issue #2408: Permit annotations in the schema migration job and deployment in the helm chart

    • Priority: Medium
    • Status: Open
    • Created: 11 days ago
    • Comments: Users face issues with updating deployments due to immutability errors.
  5. Issue #2407: Login command in CLI does not respect --domain flag and INFISICAL_API_URL env var for self-hosted instances

    • Priority: High
    • Status: Open
    • Created: 11 days ago
    • Comments: Users report that CLI commands do not respect specified domain settings, complicating self-hosted setups.

Most Recently Updated Issues

  1. Issue #2402: [bug]: AWS IAM secret rotation is not working

    • Last updated 10 days ago; users report broken manual rotation functionality.
  2. Issue #2400: InfisicalSecret does not update already generated Secret on field change

    • Last updated 11 days ago; users face issues with secret updates requiring pod deletions.
  3. Issue #2398: Extend Secret templating for InfisicalSecret

    • Last updated 12 days ago; users request more flexible templating options for secrets.
  4. Issue #2393: Machine Identity Secret Token disappear even if TTL set to 0

    • Last updated 13 days ago; users report disappearing tokens causing operational disruptions.
  5. Issue #1850: Make Project ID optional when using machine ID with .infisical.json

    • Last updated 125 days ago; users request simplification of project ID requirements for machine identities.

Themes and Commonalities

  • Integration Issues: A significant number of issues revolve around integrations with external services like GitHub, AWS, and OCI Vault, indicating a need for improved documentation and functionality.
  • User Authentication: Problems related to sign-up processes, particularly with OAuth2.0 and invite-only settings, suggest that user access management requires urgent attention.
  • Feature Requests: Many open issues are feature requests aimed at enhancing usability, such as bulk actions on secrets, improved error handling, and better UI/UX elements.
  • Bugs: Several critical bugs have been reported that affect core functionalities, including secret rotations and CLI command behaviors.

This analysis highlights areas where Infisical can improve its offerings while addressing user concerns effectively.

Report On: Fetch pull requests



Overview

The analysis of the Infisical project's pull requests (PRs) reveals a dynamic and active development environment. The project is focused on enhancing its secret management capabilities, integrating with various platforms, and improving user experience through UI/UX refinements and backend optimizations. The PRs indicate a strong emphasis on security, performance, and usability, with contributions from multiple developers addressing both new features and bug fixes.

Summary of Pull Requests

Open Pull Requests

  1. PR #2466: Addresses an invalid redirect condition in the signup invite page, allowing invited users to create accounts even when instance signup options are disabled.
  2. PR #2465: Changes the datatype of tags from string to an array of strings, enhancing data structure flexibility.
  3. PR #2464: Adds documentation for setting up MFA with Microsoft Entra ID (formerly Azure AD), expanding the project's documentation resources.
  4. PR #2458: Allows secret access approvals using user groups, introducing a new feature that enhances access control mechanisms.
  5. PR #2443: Creates necessary API updates to support secret approval policy and access approval policy Terraform resources, indicating ongoing integration with infrastructure as code tools.

Closed Pull Requests

  1. PR #2462: Redirects node documentation to new SDK docs hosted on GitHub, improving documentation accessibility and relevance.
  2. PR #2461: Removes the column for the team plan in cloud plans modal, streamlining the user interface based on updated service offerings.
  3. PR #2459: Adds a better error page for Next.js applications, improving user experience during error states.
  4. PR #2456: Fixes JWT import issues that were breaking the backend when running built MJS backend, ensuring smoother deployment processes.
  5. PR #2455: Introduces email notifications for integration sync failures, enhancing operational monitoring and alerting capabilities.

Analysis of Pull Requests

The PRs reflect a robust development effort aimed at expanding Infisical's functionality and improving its reliability and user experience. Key themes include:

  • Feature Expansion: Several PRs introduce new features such as user group-based access approvals (#2458) and enhancements to existing functionalities like Terraform resource support for approval policies (#2443).
  • Security Enhancements: PRs like #2465 and #2455 highlight ongoing efforts to bolster security through better access controls and operational monitoring.
  • Documentation Improvements: With PRs like #2462 and #2464, there's a clear focus on enhancing documentation to support new features and integrations, making it easier for users to adopt and utilize Infisical effectively.
  • User Experience Refinements: PRs such as #2459 and #2461 demonstrate attention to detail in user interface design and error handling, contributing to a more polished product.

Overall, the activity in the Infisical repository indicates a healthy project lifecycle with active contributions that address both immediate needs (bug fixes, security patches) and long-term goals (feature development, performance optimization). The project's commitment to open-source principles is evident in its collaborative approach to development and community engagement through platforms like Slack.

Report On: Fetch commits



Repo Commits Analysis

Development Team and Recent Activity

Team Members and Activities

  1. Daniel Hougaard

    • Recent Contributions:
    • Merged features related to organization-level audit logs and error boundaries.
    • Implemented server-side pagination for secrets overview.
    • Worked on dynamic secrets for Azure Entra ID and added email notifications for integration sync failures.
    • Engaged in multiple bug fixes and documentation updates.
    • Collaborations: Frequently collaborates with Maidul Islam, Scott Wilson, and Sheen.
  2. Maidul Islam

    • Recent Contributions:
    • Focused on server-side pagination, dynamic secrets, and various bug fixes.
    • Contributed to the integration of Azure Entra ID and improvements in the UI.
    • Collaborations: Worked closely with Daniel Hougaard on several features.
  3. Scott Wilson

    • Recent Contributions:
    • Implemented UI fixes and enhancements, including error handling improvements.
    • Contributed to pagination features and various bug fixes across multiple components.
    • Collaborations: Collaborated with Daniel Hougaard on error boundaries.
  4. Meet Shah

    • Recent Contributions:
    • Focused on integrating dynamic secrets for Azure Entra ID and improving related documentation.
    • Engaged in bug fixes and feature enhancements across different components.
    • Collaborations: Worked alongside Daniel Hougaard.
  5. Sheen Santos Capadangan

    • Recent Contributions:
    • Contributed to various documentation updates, UI improvements, and bug fixes.
    • Involved in enhancing the Slack integration experience.
    • Collaborations: Collaborated with multiple team members including Maidul Islam.
  6. Akhil Mohan

    • Recent Contributions:
    • Focused on resolving permission-related issues and enhancing user group functionalities.
    • Engaged in various bug fixes across the backend services.
    • Collaborations: Worked with Maidul Islam on several features.
  7. BlackMagiq (Dangtony98)

    • Recent Contributions:
    • Contributed to PKI management features and documentation updates.
    • Engaged in bug fixes across various components.
    • Collaborations: Collaborated with other developers on documentation improvements.

Patterns and Themes

  • The team is actively working on enhancing the secret management capabilities of the platform, particularly focusing on dynamic secrets, audit logging, and integrations with external services like Azure Entra ID and GitHub.
  • There is a strong emphasis on collaboration among team members, particularly between Daniel Hougaard and Maidul Islam, indicating a well-coordinated effort towards feature development and bug resolution.
  • The high volume of commits (164 by Daniel alone) suggests a rapid pace of development, with significant changes being made across multiple branches simultaneously.
  • Documentation updates are frequently integrated alongside feature development, reflecting a commitment to maintaining clear guidance for users.

Conclusions

The Infisical development team is highly active, demonstrating effective collaboration and a focus on enhancing functionality while addressing bugs. The recent activities indicate a strategic push towards improving user experience through better integrations and robust secret management features.