voxpupuli / puppet-archive

Compressed archive file download and extraction with native types/providers for Windows and Unix
https://forge.puppet.com/puppet/archive
Apache License 2.0
59 stars 176 forks source link

archive module reveals sensitive information #507

Open Simoliv opened 9 months ago

Simoliv commented 9 months ago

When running archive module with (fe) JFrog Api headers, this value is visible and unhideable in puppet logs (fe in stdout)

What are you seeing

puppet agent run shows snesitive information

What behaviour did you expect instead

an option to hide/redact this sensitive information

Output log

For example : /var/log/messages-20230903:Aug 31 02:46:00 XXXXXXXXX puppet-agent[24334]: (/Stage[main]/This_filebeat/Archive[etc/filebeat/filebeat-8.9.0-x86_64.rpm]) Could not evaluate: Execution of 'wget -qO- https://XXXXXXXXXXXXXXXXX/artifactory/co/elastic/filebeat/8.9.0/filebeat-8.9.0-x86_64.rpm.md5 --max-redirect=5 --header "X-JFrog-Art-Api: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"' returned 8:

Any additional information you'd like to impart

I tried to use Sensitive datatype in various options, without success yet.