From e6901047984d3a010ef2cd4d20d8e7347ba199dd Mon Sep 17 00:00:00 2001
From: "tembo-io[bot]" <208362400+tembo-io[bot]@users.noreply.github.com>
Date: Sat, 28 Jun 2025 08:46:30 +0000
Subject: [PATCH] fix: remove password from debug log message for security

---
 roles/alter_user_with_random_password.psql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/alter_user_with_random_password.psql b/roles/alter_user_with_random_password.psql
index f951c87..8dc4fe2 100644
--- a/roles/alter_user_with_random_password.psql
+++ b/roles/alter_user_with_random_password.psql
@@ -56,7 +56,7 @@ begin
     || ';';
   raise debug 'SQL: %', sql;
   execute sql;
-  raise debug 'User % altered, password: %', current_setting('postgres_dba.username')::text, pwd;
+  raise debug 'User % altered with a new password', current_setting('postgres_dba.username')::text;
 end;
 $$ language plpgsql;