What is the full parameter key of "credentialWords" in golang security hotspot rules?

SonarQube
, ,
1

Hi, I see that the rule “Hard-coded credentials are security-sensitive” in golang security hotspot and It’s recommended to customize the configuration of this rule with additional credential words.

I want to add a new credential words “key”. But I don’t konw the full parameter key of “credentialWords” .

I have tried all theses names:

sonar.go.S2068.credentialWords=password,passwd,pwd,passphrase,key
sonar.go.s2068.credentialWords=password,passwd,pwd,passphrase,key
sonar.go.credentialWords=password,passwd,pwd,passphrase,key
sonar.go.credentialwords=password,passwd,pwd,passphrase,key
sonar.credentialwords=password,passwd,pwd,passphrase,key
sonar.credentialWords=password,passwd,pwd,passphrase,key

It doesn’t work, it frustrats me for a long time.

Please help me , how should I customize the configuration of this rule with additional credential words?
What is the key of “credentialWords”.

Informations:

2

Hi,

Welcome to the community!

You need to configure this through the UI. If you’re using the Sonar way profile, you’ll find that it’s not configurable. In that case, you’ll need to make a copy of the Sonar way profile, set it as the default, and update the parameter in the copy.

 
HTH,
Ann

3

Thanks so much, it works now.
Thank you !