gnodet commented on PR #25064:
URL: https://github.com/apache/camel/pull/25064#issuecomment-5068497721
Good catch — yes, there are at least 6 other test-infra service interfaces
with the same `default String password()` pattern returning hard-coded values:
- `ArangoDBInfraService`
- `ElasticSearchInfraService`
- `HiveMQInfraService`
- `IbmMQInfraService`
- `KeycloakInfraService`
- `RabbitMQInfraService`
Plus a couple of container implementation classes
(`CouchDbLocalContainerInfraService`, `InfinispanLocalContainerInfraService`)
with inline hard-coded passwords.
This PR scoped itself to the 4 SonarCloud **BLOCKER**-level S2068 findings.
The others are likely flagged at a lower severity (or not flagged yet). I'll
open a follow-up to apply the same `@SuppressWarnings("java:S2068")`
suppression to the remaining services to keep SonarCloud clean.
_Claude Code on behalf of gnodet_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
