From 98e933ca5496d6cd5aba7be4705b29862cb9004e Mon Sep 17 00:00:00 2001
From: Megan Marsh <megan@hashicorp.com>
Date: Fri, 7 Dec 2018 12:00:01 -0800
Subject: [PATCH] make packer inspect not print sensitive variables.

---
 command/inspect.go | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/command/inspect.go b/command/inspect.go
index f71efcf20..3a368884f 100644
--- a/command/inspect.go
+++ b/command/inspect.go
@@ -50,6 +50,11 @@ func (c *InspectCommand) Run(args []string) int {
 	} else {
 		requiredHeader := false
 		for k, v := range tpl.Variables {
+			for _, sensitive := range tpl.SensitiveVariables {
+				if ok := strings.Compare(sensitive.Default, v.Default); ok == 0 {
+					v.Default = "<sensitive>"
+				}
+			}
 			if v.Required {
 				if !requiredHeader {
 					requiredHeader = true
@@ -82,6 +87,11 @@ func (c *InspectCommand) Run(args []string) int {
 			if v.Required {
 				continue
 			}
+			for _, sensitive := range tpl.SensitiveVariables {
+				if ok := strings.Compare(sensitive.Default, v.Default); ok == 0 {
+					v.Default = "<sensitive>"
+				}
+			}
 
 			padding := strings.Repeat(" ", max-len(k))
 			output := fmt.Sprintf("  %s%s = %s", k, padding, v.Default)