Skip to content

False positive in python/ql/src/Security/CWE-312/CleartextLogging.ql #20168

@SatanicMechanic

Description

@SatanicMechanic

secrets_client.describe_secret(SecretId=secret_name)
secrets_client.delete_secret(SecretId=secret_name, ForceDeleteWithoutRecovery=True)
print(f"Deleted secret '{secret_name}' in region '{region}'")
This expression logs as clear text.
This expression logs as clear text.

Variable name doesn’t represent a secret.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions