How can we clean up passwords, secrets from existing confluence page

[Vaidehi Thakur]

As a security Engineer I am trying to work on a task which will make sure that our existing confluence pages doesn't have any passwords, secrets or api keys. If there are any then i need to identify those pages and then clean up accordingly.

Can you please suggest a way to do it and how.

Best

[WW]

Out of the box, there's no easy way to do this.  You'll either need to write your own script or get someone else's.

If you can code, you could always come up with a list of keywords or phrases to search for, then use the Confluence Server REST API to search through the content in bulk. (There's a REST API for cloud, but I'm not familiar with it).  Or if you have ScriptRunner for Confluence, you could create a script in it to do the same thing.

You can also look in the Atlassian Marketplace for a plugin that might already do what you're looking for.