OCI private keys are hard coded in the provider

Description

When accessing OCI programmatically, users can use a password protected certificate. Including that password in your files that are checked into a repository leaves you exposed to account hijacking.

We recommend using a secrets store or security tokens for secure access.

Fix - Buildtime

Terraform

provider "oci" {
-  private_key_password = "secretPassword"  
}