Automated Code Change

PiperOrigin-RevId: 662088251
Change-Id: I6665e0342462a9595cd146c9e9b5d3ae73f83689

proto/ic/v1/ic_service.proto

@@ -18,6 +18,7 @@ syntax = "proto3";
 // end points to receive requests and returns responses using these messages.
 package ic.v1;
 
+import "storage/datapol/annotations/proto/semantic_annotations.proto";
 import "proto/common/v1/account.proto"; /* copybara-comment */
 import "proto/common/v1/common.proto"; /* copybara-comment */
 import "proto/common/v1/oauthclient.proto"; /* copybara-comment */
@@ -57,7 +58,7 @@ message IcSecrets {
   map<string, string> id_provider_secrets = 5;
 
   message TokenKeys {
-    string private_key = 1;
+    string private_key = 1 [(datapol.semantic_type) = ST_SECURITY_MATERIAL];
     string public_key = 2;
   }
   map<string, TokenKeys> token_keys = 6;
@@ -110,7 +111,7 @@ message ConfigResponse {}
 
 message ConfigIdentityProviderRequest {
   common.IdentityProvider item = 1;
-  string client_secret = 3;
+  string client_secret = 3 [(datapol.semantic_type) = ST_SECURITY_MATERIAL];
   ConfigModification modification = 2;
 }
 

proto/scim/v2/users.proto

@@ -21,6 +21,8 @@ syntax = "proto3";
 // Protocol: https://tools.ietf.org/html/rfc7644
 package scim.v2;
 
+import "storage/datapol/annotations/proto/semantic_annotations.proto";
+
 option go_package = "github.com/GoogleCloudPlatform/healthcare-federated-access-services/proto/scim/v2";
 
 // SCIM representation of a 'User' as per
@@ -147,7 +149,7 @@ message User {
   bool active = 15;
 
   // UNUSED but present for completeness.
-  string password = 16;
+  string password = 16 [(datapol.semantic_type) = ST_ACCOUNT_CREDENTIAL];
 
   // E-mail addresses for the User. The value SHOULD be canonicalized by the
   // Service Provider, e.g. [email protected] instead of [email protected].