Potential fix for code scanning alert no. 395: Clear-text logging of sensitive information

joel-rieke · github-advanced-security[bot] · web-flow · commit 1140f1de3c69 · 2025-07-28T10:17:55.000-07:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/sql/analyzer/analyzer.go b/sql/analyzer/analyzer.go
@@ -312,9 +312,13 @@ func sanitizeArguments(args []interface{}) []interface{} {
 			args[i] = sanitizeMap(v)
 		case []interface{}:
 			args[i] = sanitizeArguments(v)
+		case plan.AuthenticationMysqlNativePassword:
+			args[i] = "[PASSWORD_REDACTED]"
 		default:
 			if reflect.TypeOf(arg).Kind() == reflect.Struct {
 				args[i] = "[STRUCT_REDACTED]"
+			} else {
+				args[i] = "[REDACTED]"
 			}
 		}
 	}

Original file line number	Diff line number	Diff line change
`@@ -312,9 +312,13 @@ func sanitizeArguments(args []interface{}) []interface{} {`
`312`	`312`	`args[i] = sanitizeMap(v)`
`313`	`313`	`case []interface{}:`
`314`	`314`	`args[i] = sanitizeArguments(v)`
	`315`	`+ case plan.AuthenticationMysqlNativePassword:`
	`316`	`+ args[i] = "[PASSWORD_REDACTED]"`
`315`	`317`	`default:`
`316`	`318`	`if reflect.TypeOf(arg).Kind() == reflect.Struct {`
`317`	`319`	`args[i] = "[STRUCT_REDACTED]"`
	`320`	`+ } else {`
	`321`	`+ args[i] = "[REDACTED]"`
`318`	`322`	`}`
`319`	`323`	`}`
`320`	`324`	`}`