Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create rule S7161: Tableau secrets should not be disclosed #4497

Merged
merged 4 commits into from
Nov 15, 2024

Conversation

github-actions[bot]
Copy link
Contributor

You can preview this rule here (updated a few minutes after each push).

Review

A dedicated reviewer checked the rule description successfully for:

  • logical errors and incorrect information
  • information gaps and missing content
  • text style and tone
  • PR summary and labels follow the guidelines

@loris-s-sonarsource loris-s-sonarsource changed the title Create rule S7161 Create rule S7161: Tableau secrets should not be disclosed Nov 14, 2024
@loris-s-sonarsource loris-s-sonarsource marked this pull request as ready for review November 14, 2024 15:07
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One small change and a comment.

Comment on lines 10 to 17
Tableau secrets scopes depend on the type of secret. From the most impactful to
the least:

1. Account passwords
2. Personal access tokens (PAT)
3. "Credentials token", received after a SignIn request

Their scopes vary in terms of lifetime, access, and impact.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It feels like the word "impact" appears very frequently here, especially given that it's also in the section title. However, it doesn't negatively affect the meaning of the text so it's not something that needs to be changed.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I will make it a little more specific

shared_content/secrets/impact/dataviz_takeover.adoc Outdated Show resolved Hide resolved
Copy link

Quality Gate passed Quality Gate passed for 'rspec-tools'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

Copy link

Quality Gate passed Quality Gate passed for 'rspec-frontend'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@loris-s-sonarsource loris-s-sonarsource merged commit 8d1152d into master Nov 15, 2024
11 of 12 checks passed
@loris-s-sonarsource loris-s-sonarsource deleted the rule/add-RSPEC-S7161 branch November 15, 2024 15:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants