Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

password shouldn't show up in report for application missing encryption #284

Closed
cfabianski opened this issue Dec 17, 2022 · 0 comments · Fixed by #295
Closed

password shouldn't show up in report for application missing encryption #284

cfabianski opened this issue Dec 17, 2022 · 0 comments · Fixed by #295
Assignees
@spdawson
Labels
bug Something isn't working

Comments

@cfabianski
Copy link
Collaborator

Description

We should filter out the data category passwords from showing up in application missing encryption policy.

Expected Behavior

Considering the table below, you should not see an alert for password missing application encryption

CREATE TABLE public.users (
  -- ...
  first_name character varying,
  password character varying,
  -- ...
)

Actual Behavior

You see an alert
@cfabianski cfabianski added the bug Something isn't working label Dec 17, 2022
@spdawson spdawson self-assigned this Dec 19, 2022
spdawson added a commit that referenced this issue Dec 19, 2022
@spdawson
fix: Password reported by application-level encryption policy
dbd0816 
We should not report policy violations for the "Password" data
category, for the application-level encryption missing policy.

Fixes #284
@spdawson spdawson mentioned this issue Dec 19, 2022
Merged
4 tasks
spdawson added a commit that referenced this issue Dec 20, 2022
@spdawson
fix: Password reported by application-level encryption policy (#295)
9b589e2 
We should not report policy violations for the "Password" data
category, for the application-level encryption missing policy.

Fixes #284
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@spdawson spdawson

Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

fix: Password reported by application-level encryption policy Bearer/bearer
2 participants
@cfabianski @spdawson