Fix code scanning alert no. 32: Clear-text logging of sensitive infor…

…mation Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
splunk · Nov 20, 2024 · 253eb1e · 253eb1e
1 parent c92510a
commit 253eb1e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/tools/kubectl-splunk b/tools/kubectl-splunk
@@ -194,7 +194,8 @@ def execute_on_pod(args, pod_name):
     else:
         return
 
-    logging.debug(f"Executing command on pod {pod_name}: {' '.join(cmd)}")
+    sanitized_cmd = [arg if '-auth' not in arg else '-auth *****:*****' for arg in cmd]
+    logging.debug(f"Executing command on pod {pod_name}: {' '.join(sanitized_cmd)}")
     try:
         subprocess.run(cmd, check=True)
     except subprocess.CalledProcessError as e: