# Git history secret scan summary (masked)

- commits scanned: 174
- unique masked findings: 102

- password: 86
- token_or_key: 16

## Findings

- password `charts/suitecrm/templates/secret.yaml:8` commit `8882e3c3a9f0` — `SUITECRM_PASSWORD: <redacted> .Values.suitecrm.adminPassword | quote }}`
- password `charts/suitecrm/templates/secret.yaml:13` commit `8882e3c3a9f0` — `SUITECRM_SMTP_PASSWORD: <redacted> .Values.suitecrm.smtp.password | quote }}`
- password `charts/suitecrm/values.yaml:50` commit `8882e3c3a9f0` — `adminPassword: <redacted>     # Bitte überschreiben (Secret!)`
- password `charts/suitecrm/values.yaml:61` commit `8882e3c3a9f0` — `password: <redacted>`
- password `charts/suitecrm/values.yaml:78` commit `8882e3c3a9f0` — `rootPassword: <redacted>`
- password `charts/suitecrm/values.yaml:80` commit `8882e3c3a9f0` — `password: <redacted>       # Bitte überschreiben (Secret!)`
- password `espocrm/values-mariadb.yaml:3` commit `8882e3c3a9f0` — `rootPassword: <redacted>`
- password `espocrm/values-mariadb.yaml:5` commit `8882e3c3a9f0` — `password: <redacted>`
- password `espocrm/values.yaml:20` commit `8882e3c3a9f0` — `password: <redacted>`
- password `charts/n8n/values.yaml:7` commit `cea4d08d09f4` — `password: <redacted>`
- password `applications/n8n.yaml:28` commit `940621de7014` — `password: <redacted>`
- password `applications/n8n.yaml:30` commit `582823515078` — `password: <redacted>`
- password `applications/n8n.yaml:24` commit `1df368396c23` — `password: <redacted>`
- password `applications/n8n.yaml:23` commit `fd4ba55e56eb` — `password: <redacted>`
- password `charts/suitecrm/values.yaml:59` commit `391b114a0942` — `password: <redacted>`
- password `charts/suitecrm/values.yaml:76` commit `391b114a0942` — `rootPassword: <redacted>`
- password `charts/suitecrm/values.yaml:78` commit `391b114a0942` — `password: <redacted>       # Bitte überschreiben (Secret!)`
- password `espocrm/espocrm-db-secret.yaml:8` commit `aca36be94f1e` — `mariadb-root-password: <redacted>`
- password `espocrm/espocrm-db-secret.yaml:9` commit `aca36be94f1e` — `mariadb-password: <redacted>`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:97` commit `aca36be94f1e` — `{{- $password :<redacted> "" }}`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:106` commit `aca36be94f1e` — `{{- $password = <redacted> $secretData .key | b64dec }}`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:113` commit `aca36be94f1e` — `{{- $password = <redacted> ($providedPasswordValue | toString) .context }}`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:118` commit `aca36be94f1e` — `{{- $password = <redacted> ($providedPasswordValue | toString) .context }}`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:125` commit `aca36be94f1e` — `{{- $requiredPassword :<redacted> dict "valueKey" $providedPasswordKey "secret" .secret "field" .key "subchart" $subchart "context" $.context -}}`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:133` commit `aca36be94f1e` — `{{- $password = <redacted> $passwordLength }}`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:134` commit `aca36be94f1e` — `{{- $password = <redacted> "\\W" $password "@" | substr 5 $passwordLength }}`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:135` commit `aca36be94f1e` — `{{- $password = <redacted> "%s%s" $subStr $password | toString | shuffle }}`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:137` commit `aca36be94f1e` — `{{- $password = <redacted> $passwordLength }}`
- password `espocrm/mariadb/charts/common/templates/_secrets.tpl:142` commit `aca36be94f1e` — `{{- $password = <redacted> | b64enc }}`
- password `espocrm/mariadb/charts/common/templates/validations/_mariadb.tpl:21` commit `aca36be94f1e` — `{{- $valueKeyRootPassword :<redacted> printf "%s.rootPassword" $authPrefix -}}`
- password `espocrm/mariadb/charts/common/templates/validations/_mariadb.tpl:23` commit `aca36be94f1e` — `{{- $valueKeyPassword :<redacted> printf "%s.password" $authPrefix -}}`
- password `espocrm/mariadb/charts/common/templates/validations/_mariadb.tpl:24` commit `aca36be94f1e` — `{{- $valueKeyReplicationPassword :<redacted> printf "%s.replicationPassword" $authPrefix -}}`
- password `espocrm/mariadb/charts/common/templates/validations/_mariadb.tpl:29` commit `aca36be94f1e` — `{{- $requiredRootPassword :<redacted> dict "valueKey" $valueKeyRootPassword "secret" .secret "field" "mariadb-root-password" -}}`
- password `espocrm/mariadb/charts/common/templates/validations/_mariadb.tpl:34` commit `aca36be94f1e` — `{{- $requiredPassword :<redacted> dict "valueKey" $valueKeyPassword "secret" .secret "field" "mariadb-password" -}}`
- password `espocrm/mariadb/charts/common/templates/validations/_mariadb.tpl:39` commit `aca36be94f1e` — `{{- $requiredReplicationPassword :<redacted> dict "valueKey" $valueKeyReplicationPassword "secret" .secret "field" "mariadb-replication-password" -}}`
- password `espocrm/mariadb/templates/NOTES.txt:45` commit `aca36be94f1e` — `Password : <redacted> get secret --namespace {{ .Release.Namespace }} {{ template "mariadb.secretName" . }} -o jsonpath=<redacted> | base64 -d)`
- password `espocrm/mariadb/templates/NOTES.txt:68` commit `aca36be94f1e` — `ROOT_PASSWORD=<redacted> get secret --namespace {{ .Release.Namespace }} {{ template "mariadb.secretName" . }} -o jsonpath=<redacted> | base64 -d)`
- password `espocrm/mariadb/templates/NOTES.txt:69` commit `aca36be94f1e` — `helm upgrade --namespace {{ .Release.Namespace }} {{ .Release.Name }} oci:<redacted> --set auth.rootPassword=<redacted>`
- token_or_key `espocrm/mariadb/templates/primary/statefulset.yaml:46` commit `aca36be94f1e` — `automountServiceAccountToken: <redacted> .Values.primary.automountServiceAccountToken }}`
- password `espocrm/mariadb/templates/primary/statefulset.yaml:254` commit `aca36be94f1e` — `password_aux=<redacted>`
- password `espocrm/mariadb/templates/primary/statefulset.yaml:269` commit `aca36be94f1e` — `password_aux=<redacted>`
- password `espocrm/mariadb/templates/primary/statefulset.yaml:284` commit `aca36be94f1e` — `password_aux=<redacted>`
- password `espocrm/mariadb/templates/primary/statefulset.yaml:364` commit `aca36be94f1e` — `password_aux=<redacted>`
- password `espocrm/mariadb/templates/primary/statefulset.yaml:368` commit `aca36be94f1e` — `MYSQLD_EXPORTER_PASSWORD=<redacted> /bin/mysqld_exporter --mysqld.address=<redacted> .Values.primary.containerPorts.mysql }} --mysqld.username=<redacted> --web.listen-address=<redacted> .Values.metrics.containerPorts.htt`
- token_or_key `espocrm/mariadb/templates/secondary/statefulset.yaml:52` commit `aca36be94f1e` — `automountServiceAccountToken: <redacted> .Values.secondary.automountServiceAccountToken }}`
- password `espocrm/mariadb/templates/secondary/statefulset.yaml:241` commit `aca36be94f1e` — `password_aux=<redacted>`
- password `espocrm/mariadb/templates/secondary/statefulset.yaml:256` commit `aca36be94f1e` — `password_aux=<redacted>`
- password `espocrm/mariadb/templates/secondary/statefulset.yaml:271` commit `aca36be94f1e` — `password_aux=<redacted>`
- password `espocrm/mariadb/templates/secondary/statefulset.yaml:347` commit `aca36be94f1e` — `password_aux=<redacted>`
- password `espocrm/mariadb/templates/secondary/statefulset.yaml:351` commit `aca36be94f1e` — `MYSQLD_EXPORTER_PASSWORD=<redacted> /bin/mysqld_exporter --mysqld.address=<redacted> .Values.secondary.containerPorts.mysql }} --mysqld.username=<redacted> --web.listen-address=<redacted> .Values.metrics.containerPorts.h`
- password `espocrm/mariadb/templates/secrets.yaml:8` commit `aca36be94f1e` — `{{- $rootPassword :<redacted> include "common.secrets.passwords.manage" ( dict "secret" ( include "mariadb.secretName" . ) "key" "mariadb-root-password" "providedValues" ( list "auth.rootPassword" ) "honorProvidedValues"`
- password `espocrm/mariadb/templates/secrets.yaml:9` commit `aca36be94f1e` — `{{- $password :<redacted> .Values.auth.password }}`
- password `espocrm/mariadb/templates/secrets.yaml:11` commit `aca36be94f1e` — `{{- $password = <redacted> "common.secrets.passwords.manage" ( dict "secret" ( include "mariadb.secretName" . ) "key" "mariadb-password" "providedValues" ( list "auth.password" ) "honorProvidedValues" true "context" $ ) `
- password `espocrm/mariadb/templates/secrets.yaml:13` commit `aca36be94f1e` — `{{- $password = <redacted> 10 }}`
- password `espocrm/mariadb/templates/secrets.yaml:29` commit `aca36be94f1e` — `mariadb-root-password: <redacted> print $rootPassword | b64enc | quote }}`
- password `espocrm/mariadb/templates/secrets.yaml:31` commit `aca36be94f1e` — `mariadb-root-password: <redacted> required "A MariaDB Root Password is required!" .Values.auth.rootPassword | b64enc | quote }}`
- password `espocrm/mariadb/templates/secrets.yaml:35` commit `aca36be94f1e` — `mariadb-password: <redacted> print $password | b64enc | quote }}`
- password `espocrm/mariadb/templates/secrets.yaml:37` commit `aca36be94f1e` — `mariadb-password: <redacted> required "A MariaDB Database Password is required!" $password | b64enc | quote }}`
- password `espocrm/mariadb/templates/secrets.yaml:42` commit `aca36be94f1e` — `mariadb-replication-password: <redacted> include "common.secrets.passwords.manage" ( dict "secret" ( include "common.names.fullname" . ) "key" "mariadb-replication-password" "providedValues" ( list "auth.replicationPassw`
- password `espocrm/mariadb/templates/secrets.yaml:44` commit `aca36be94f1e` — `mariadb-replication-password: <redacted> required "A MariaDB Replication Password is required!" .Values.auth.replicationPassword | b64enc | quote }}`
- password `espocrm/mariadb/templates/secrets.yaml:68` commit `aca36be94f1e` — `password: <redacted> print $rootPassword | b64enc | quote }}`
- password `espocrm/mariadb/templates/secrets.yaml:95` commit `aca36be94f1e` — `password: <redacted> required "A MariaDB Database Password is required!" $password | b64enc | quote }}`
- password `espocrm/mariadb/templates/secrets.yaml:97` commit `aca36be94f1e` — `password: <redacted> print $password | b64enc | quote }}`
- token_or_key `espocrm/mariadb/templates/secretstoreproviderclass-tde.yaml:31` commit `aca36be94f1e` — `secretKey: <redacted> .Values.tde.secretsStoreProvider.vault.randomKeySecretKey | quote }}`
- token_or_key `espocrm/mariadb/templates/secretstoreproviderclass-tde.yaml:35` commit `aca36be94f1e` — `secretKey: <redacted> .Values.tde.secretsStoreProvider.vault.encryptedKeySecretKey | quote }}`
- token_or_key `espocrm/mariadb/templates/serviceaccount.yaml:18` commit `aca36be94f1e` — `automountServiceAccountToken: <redacted> .Values.serviceAccount.automountServiceAccountToken }}`
- token_or_key `espocrm/mariadb/templates/update-password/job.yaml:35` commit `aca36be94f1e` — `automountServiceAccountToken: <redacted> .Values.passwordUpdateJob.automountServiceAccountToken }}`
- password `espocrm/mariadb/templates/update-password/job.yaml:108` commit `aca36be94f1e` — `echo "STOP SLAVE; CHANGE MASTER TO MASTER_PASSWORD=<redacted> START SLAVE;" | mysql_remote_execute $replica_host {{ .Values.secondary.containerPorts.mysql }} "" root $MARIADB_NEW_ROOT_PASSWORD`
- password `espocrm/mariadb/templates/update-password/new-secret.yaml:7` commit `aca36be94f1e` — `{{- $rootPassword :<redacted> .Values.auth.rootPassword }}`
- password `espocrm/mariadb/templates/update-password/new-secret.yaml:8` commit `aca36be94f1e` — `{{- $password :<redacted> .Values.auth.password }}`
- password `espocrm/mariadb/templates/update-password/new-secret.yaml:9` commit `aca36be94f1e` — `{{- $replicationPassword :<redacted> .Values.auth.replicationPassword }}`
- password `espocrm/mariadb/templates/update-password/new-secret.yaml:21` commit `aca36be94f1e` — `mariadb-root-password: <redacted> required "The new root password is required!" $rootPassword | b64enc | quote }}`
- password `espocrm/mariadb/templates/update-password/new-secret.yaml:23` commit `aca36be94f1e` — `mariadb-password: <redacted> required "The new user password is required!" $password | b64enc | quote }}`
- password `espocrm/mariadb/templates/update-password/new-secret.yaml:26` commit `aca36be94f1e` — `mariadb-replication-password: <redacted> required "The new replication password is required!" $replicationPassword | b64enc | quote }}`
- password `espocrm/mariadb/templates/update-password/previous-secret.yaml:7` commit `aca36be94f1e` — `{{- $rootPassword :<redacted> .Values.passwordUpdateJob.previousPasswords.rootPassword }}`
- password `espocrm/mariadb/templates/update-password/previous-secret.yaml:8` commit `aca36be94f1e` — `{{- $password :<redacted> .Values.passwordUpdateJob.previousPasswords.password }}`
- password `espocrm/mariadb/templates/update-password/previous-secret.yaml:9` commit `aca36be94f1e` — `{{- $replicationPassword :<redacted> .Values.passwordUpdateJob.previousPasswords.replicationPassword }}`
- password `espocrm/mariadb/templates/update-password/previous-secret.yaml:21` commit `aca36be94f1e` — `mariadb-root-password: <redacted> required "The previous root password is required!" $rootPassword | b64enc | quote }}`
- password `espocrm/mariadb/templates/update-password/previous-secret.yaml:23` commit `aca36be94f1e` — `mariadb-password: <redacted> required "The previous user password is required!" $password | b64enc | quote }}`
- password `espocrm/mariadb/templates/update-password/previous-secret.yaml:26` commit `aca36be94f1e` — `mariadb-replication-password: <redacted> required "The previous replication password is required!" $replicationPassword | b64enc | quote }}`
- password `espocrm/mariadb/values.yaml:129` commit `aca36be94f1e` — `rootPassword: <redacted>`
- password `espocrm/mariadb/values.yaml:140` commit `aca36be94f1e` — `password: <redacted>`
- password `espocrm/mariadb/values.yaml:148` commit `aca36be94f1e` — `replicationPassword: <redacted>`
- password `espocrm/mariadb/values.yaml:154` commit `aca36be94f1e` — `forcePassword: <redacted>`
- token_or_key `espocrm/mariadb/values.yaml:266` commit `aca36be94f1e` — `randomKeySecretKey: <redacted>`
- token_or_key `espocrm/mariadb/values.yaml:268` commit `aca36be94f1e` — `encryptedKeySecretKey: <redacted>`
- token_or_key `espocrm/mariadb/values.yaml:290` commit `aca36be94f1e` — `automountServiceAccountToken: <redacted>`
- token_or_key `espocrm/mariadb/values.yaml:741` commit `aca36be94f1e` — `automountServiceAccountToken: <redacted>`
- token_or_key `espocrm/mariadb/values.yaml:1167` commit `aca36be94f1e` — `automountServiceAccountToken: <redacted>`
- password `espocrm/mariadb/values.yaml:1199` commit `aca36be94f1e` — `rootPassword: <redacted>`
- password `espocrm/mariadb/values.yaml:1200` commit `aca36be94f1e` — `password: <redacted>`
- password `espocrm/mariadb/values.yaml:1201` commit `aca36be94f1e` — `replicationPassword: <redacted>`
- token_or_key `espocrm/mariadb/values.yaml:1293` commit `aca36be94f1e` — `automountServiceAccountToken: <redacted>`
- token_or_key `espocrm/values.yaml:35` commit `aca36be94f1e` — `passwordSecretKey: <redacted>`
- token_or_key `espocrm/values.yaml:40` commit `aca36be94f1e` — `usernameSecretKey: <redacted>`
- token_or_key `espocrm/values.yaml:42` commit `aca36be94f1e` — `passwordSecretKey: <redacted>`
- token_or_key `espocrm/values.yaml:44` commit `aca36be94f1e` — `siteUrlSecretKey: <redacted>`
- password `charts/mautic/values.yaml:14` commit `43f37c37bed7` — `rootPassword: <redacted>`
- password `charts/mautic/values.yaml:16` commit `49eefd32d39d` — `password: <redacted>`
- password `charts/mautic/values.yaml:11` commit `81235193e5c8` — `password: <redacted>`
- password `charts/mautic/values.yaml:15` commit `81235193e5c8` — `rootPassword: <redacted>`
- password `charts/mautic/values.yaml:17` commit `81235193e5c8` — `password: <redacted>`