puppetlabs/puppetlabs-servicenow_cmdb_integration

$password parameter should be of type Sensitive[String]

Opened this issue · 1 comments

Describe the Bug

The password parameter for the class is currently of type String. This exposes the password in run logs, Impact Analysis and the catalog.

Expected Behavior

Change the type of this parameter to Sensitive[String] and ensure correct & secure handling of the content. For example. the .unwrap method should only be used inside the epp template.

Created PIE-396 to track this.