Skip to content

PlainText credentials in "ps" linux command when run the module #1682

@devsecops-pe

Description

@devsecops-pe

Hi all,
When I use the module to clone the repo, I can see the URL with username and password using the "ps -fe" command.
#################
def git_password_url_escaped(self):
return urllib.parse.quote(self._git_password, safe='')
#################
if not self._git_username:
setattr(self, '_git_username', input('Insert git username: '))
if not self._git_password:
setattr(self, '_git_password', getpass.getpass(prompt='Insert git password: '))
self._git_port = port
self.git_base_url = (f"https://{self._git_username}:{self.git_password_url_escaped}"
f"@{self._git_host}:{self._git_port}/")
#################
This is the code that I'm using.
Thanks

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions