log.debug("Processing started for customer {}", customer);
// or
log.debug("User {} not authorized for operation {} ", user, operation);
<rule name="ObfuscationRequired"
since="0.1.0"
language="java"
message="Obfuscation is missing for sensitive logging arguments: https://github.com/dgroup/arch4u-pmd/discussions/64"
class="io.github.dgroup.arch4u.pmd.ObfuscationRequired">
...
<properties>
<property name="sensitiveClasses" description="Package(s) or direct class name(s) for objects that should not be passed into logs without obfuscation" value="tbd"/>
<property name="obfuscationBy" value="ClassA#methodA|com.company.ClassB#methodB|com.company.ClassC" />
</properties>
</rule>