-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cira #423
base: main
Are you sure you want to change the base?
Conversation
} | ||
|
||
password = string(passwordBytes) | ||
fmt.Print(password) |
Check failure
Code scanning / CodeQL
Clear-text logging of sensitive information High
Sensitive data returned by an access to password
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix AI 20 days ago
To fix the problem, we should remove the line that prints the password in clear text. Instead of printing the password, we can log a message indicating that the password was processed without revealing its value. This change will ensure that sensitive information is not exposed in the logs.
- Remove the line
fmt.Print(password)
from the code. - Optionally, add a log message indicating that the password was processed, without including the actual password.
-
Copy modified line R256
@@ -255,3 +255,3 @@ | ||
password = string(passwordBytes) | ||
fmt.Print(password) | ||
log.Info("Password processed successfully") | ||
} else { |
No description provided.