gnodet opened a new pull request, #25064:
URL: https://github.com/apache/camel/pull/25064
## Summary
_Claude Code on behalf of gnodet_
- Suppress SonarCloud S2068 (hard-coded credentials) BLOCKER vulnerabilities
in 4 test-infra service interfaces
- Add `@SuppressWarnings("java:S2068")` with justification comments to
`FtpInfraService`, `CassandraInfraService`, `CouchbaseInfraService`, and
`SmbInfraService`
- These credentials are intentional test-only fixtures for testcontainer
services and carry no security risk
**SonarCloud dashboard:**
https://sonarcloud.io/project/issues?id=apache_camel&types=VULNERABILITY&severities=BLOCKER
## Affected files
| File | Line | Issue |
|------|------|-------|
| `FtpInfraService.java` | 76 | URI format string with `password=RAW(...)` |
| `CassandraInfraService.java` | 56 | URI format string with
`password=RAW(...)` |
| `CouchbaseInfraService.java` | 59 | URI format string with
`password=RAW(...)` |
| `SmbInfraService.java` | 55 | URI format string with `password=RAW(...)` |
## Rationale
The `test-infra` module provides service interfaces for managing
testcontainer instances. The flagged passwords (`"admin"`, `"cassandra"`, etc.)
are well-known default credentials used exclusively in ephemeral test
containers — they are never deployed to production and pose no security risk.
Suppressing at the interface level with a comment is the minimal, targeted fix.
## Test plan
- [x] All 4 modules compile cleanly
- [x] Code formatted with `formatter:format` and `impsort:sort`
- [ ] CI passes
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
