Password Checker

Inspects workflow configuration to detect insecure password practices.

It performs two types of checks:

1. Credential Nodes Configuration:
Verifies whether the option “Save password in configuration (weakly encrypted)” is enabled in nodes like Credentials Widget and Credentials Configuration. If so, the check fails.

2. Embedded Password Values:
Detects passwords saved directly in configuration fields of nodes that support sensitive credentials (e.g., DB nodes, REST nodes, credential nodes). The presence of stored password values triggers a failed check.

The analysis is based on the Workflow Summary column, typically generated by the Workflow Summary Extractor node.

Input ports

1. Type: Table
   Workflow Metadata Table
   A table containing at least one JSON column representing the workflow summary. The actual column used is selected via the configuration dialog.

Output ports

1. Type: Table
   Check Results Table
   A table with three columns: Check Passed? (Boolean): true if no insecure password configurations are found; otherwise false. Message (String): Explanation of the result, including which nodes contain unsafe password settings. Check Name (String): Identifier of the check.