Skip to content

[Improvement] Enhance how credentials used with Calm DSL are stored #335

@nxchoople

Description

@nxchoople

Describe the request
Any credentials that Calm DSL needs for initialization or consumes as part of the code should be encrypted and possibly salted in order to prevent exposure and potential security breaches.

Current behaviour
Today, the credentials used to initialize Calm DSL are stored in plain text. This is insecure and flagged by security teams. Credentials should never be stored in plain text as they could be used to compromise the account used when initializing Calm DSL as well as compromising all integrations that the account has access to which would be a security breach.

Expected behaviour
Credentials are encrypted and possibly salted based upon security best practices.

Metadata

Metadata

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions