...
Passwords from non-"values.yaml"s were scraped using ripgrep (used regex was: "(pass|pwd|secret).*[=:>$'"]\S", case-insensitive and non-multiline) and then filtered manually. Usage in ONAP repos was analysed using Hound.
Visualisation Quick visualisation of OOM-ONAP dependancies basing on data provided further (for the sake of readability passwords being used only in a single file or a single YAML key or those that I was unable to classify were ommited):
Visualisation done using PDF above generated by following script (depeding on python-graphviz):
...