search

canonical / mysql-router-k8s-operator

Mysql router operator charm for kubernetes
https://charmhub.io/mysql-router-k8s
Apache License 2.0
2 stars 6 forks source link

Upgrade tls_certificates charm lib to v2 to resolve code scanning warning #271

Open shayancanonical opened 1 month ago

shayancanonical commented 1 month ago

Expected behavior

Code scanning does not provide any warnings related to the tls_certificates charmlib like https://github.com/canonical/mysql-router-k8s-operator/security/code-scanning/3. The warning is for Clear-text logging of sensitive data

Actual behavior

There is a warning that is valid - the tls_certificates charm lib v1 is logging certificates from the databag. We need to upgrade to charm lib v2 to avoid this leak.

github-actions[bot] commented 1 month ago

https://warthogs.atlassian.net/browse/DPE-4739