Skip to content

Secrets are not being protected. Do not use -AsPlainText from InputFunctions.ps1 #1086

@tmolenh

Description

@tmolenh

Reading the documentation for ConvertTo-SecureString should give a good idea of why using -AsPlainText is not a good idea.

Basically, any actual secrets should be encrypted or stored as a [SecureString] at all times. There should never be a point where they are stored as plain text, or else they aren't really secret.

Also, this is an error in PSScriptAnalyzer, so anyone using that can't use this module.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions