Skip to content

Commit 8a0f6ad

Browse files
teemu-rytilahti-sonarsourcesonartech
authored andcommitted
APPSEC-2378 Allow template strings as database password
1 parent 6790bdb commit 8a0f6ad

File tree

1 file changed

+5
-0
lines changed
  • sonar-text-plugin/src/main/resources/org/sonar/plugins/secrets/configuration

1 file changed

+5
-0
lines changed

sonar-text-plugin/src/main/resources/org/sonar/plugins/secrets/configuration/odbc.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,7 @@ provider:
4141
- "^%[sv]$"
4242
- "^\\${1,2}\\w+$"
4343
- "^\\${1,2}[{(]"
44+
- "^\\{{2,}"
4445
examples:
4546
- text: |
4647
spring.datasource.url= jdbc:postgresql://${DB_HOST}:${DB_PORT}/${DB_NAME}
@@ -79,6 +80,10 @@ provider:
7980
app.datasource.cardholder.driverClassName=com.mysql.cj.jdbc.Driver
8081
containsSecret: true
8182
match: P@ssw0rd
83+
- text: |
84+
spring.datasource.username={{`{{ secret "user" }}`}}
85+
spring.datasource.password={{`{{ secret "p@ssword" }}`}}
86+
containsSecret: false
8287
8388
- id: java-datasource-quoted
8489
rspecKey: S6703

0 commit comments

Comments
 (0)