Do not apply property promotion to parameters with the SensitiveParam…

…eter attribute (#3165)

Co-authored-by: Abdul Malik Ikhsan <samsonasik@gmail.com>
Fixes rectorphp/rector#7644

rules-tests/Php80/Rector/Class_/ClassPropertyAssignToConstructorPromotionRector/Fixture/skip_property_promotion_with_sensitive_parameter_attribute.php.inc

@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Rector\Tests\Php80\Rector\Class_\ClassPropertyAssignToConstructorPromotionRector\Fixture;
+
+final class SkipPropertyPromotionWithSensitiveParameterAttribute
+{
+    private string $password;
+
+    public function __construct(#[\SensitiveParameter] string $password)
+    {
+        $this->password = $password;
+    }
+}

rules/Php80/Rector/Class_/ClassPropertyAssignToConstructorPromotionRector.php

@@ -25,6 +25,7 @@
 use Rector\Naming\VariableRenamer;
 use Rector\NodeTypeResolver\Node\AttributeKey;
 use Rector\Php80\Guard\MakePropertyPromotionGuard;
+use Rector\Php80\NodeAnalyzer\PhpAttributeAnalyzer;
 use Rector\Php80\NodeAnalyzer\PromotedPropertyCandidateResolver;
 use Rector\PHPStanStaticTypeMapper\Enum\TypeKind;
 use Rector\VersionBonding\Contract\MinPhpVersionInterface;
@@ -60,7 +61,8 @@ public function __construct(
         private readonly VarTagRemover $varTagRemover,
         private readonly ParamAnalyzer $paramAnalyzer,
         private readonly PhpDocTypeChanger $phpDocTypeChanger,
-        private readonly MakePropertyPromotionGuard $makePropertyPromotionGuard
+        private readonly MakePropertyPromotionGuard $makePropertyPromotionGuard,
+        private readonly PhpAttributeAnalyzer $phpAttributeAnalyzer
     ) {
     }
 
@@ -224,6 +226,10 @@ private function shouldSkipParam(Param $param): bool
             return true;
         }
 
+        if ($this->phpAttributeAnalyzer->hasPhpAttribute($param, 'SensitiveParameter')) {
+            return true;
+        }
+
         if ($this->paramAnalyzer->isNullable($param)) {
             /** @var NullableType $type */
             $type = $param->type;