Security scan flags up the token being printed

CynanX commented 11 months ago

When including PyJWT in a lambda which I build into a Docker image, I then run Trivy to scan for vulnerabilities and this is picking up a security risk due to a token being exposed.

Expected Result

Trivy passes without exception.

Actual Result

Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 0)
MEDIUM: JWT (jwt-token)
════════════════════════════════════════
JWT token
────────────────────────────────────────
 /var/task/PyJWT-2.8.0.dist-info/METADATA:90 (added by 'COPY /var/task /var/task # buildkit')
────────────────────────────────────────
  88       >>> encoded = jwt.encode({"some": "payload"}, "secret", algorithm="HS256")
  89       >>> print(encoded)
  90 [     *********************************************************************************************************
  91       >>> jwt.decode(encoded, "secret", algorithms=["HS256"])

Reproduction steps

Create a Docker image with Python code using PyPWT
Run Trivy against the built image

System Information

$ python -m jwt.help

{
  "cryptography": {
    "version": "41.0.2"
  },
  "implementation": {
    "name": "CPython",
    "version": "3.11.6"
  },
  "platform": {
    "release": "23.1.0",
    "system": "Darwin"
  },
  "pyjwt": {
    "version": "2.8.0"
  }
}