securesauce / precli

Precaution CLI - command line static application security testing tool
https://precli.readthedocs.io/
Other
22 stars 3 forks source link

Add rule on argparse to check for an argument of password #353

Closed ericwb closed 7 months ago

ericwb commented 7 months ago

Sensitive data like a password should not be arguments of a CLI. They would end up appearing in the CLI history, ps output, logs, etc.

Closes: #339