Azure / Azure/azure-diskinspect-service
PII data was not removed from files captured from /etc/yum.repos.d/*repo
Open
- Dominant language
- Python
- Stars
- 33
- Forks
- 65
- Avg merge
- 2d 25m
- Merged PRs (30d)
- 2
Description
After creating a repo-config file, I found credentials in plain text in one of the files located in this directory.
Security report has been created.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by tracing how files under /etc/yum.repos.d/*repo are captured and where sensitive data is removed. Reproduce the report with a repo-config file containing credentials, then verify that captured output no longer contains the credentials or other PII.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- operating-systems, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 38/100