Find Workflow Types with Unencrypted Payloads in a Temporal Namespace

NOTE: This will only look at one workflow execution of a given type. This doesn't guarantee that all workflows of a given type are encrypting data. DOUBLE NOTE: Review the logic used to verify that payloads are encrypted, this may need to change depending on how your organisation encrypts data.

Prereqs

• Python
• uv

How to run

• Update run.sh with you Temporal Cloud details.
• Run. ie ./run.sh

Example output

Format; WORKFLOW TYPE / SUCCESS|ERROR|FAILED / NOTES

• SUCCESS - WorkflowType appears to use encrpyted data
• FAILED - WorkflowType doesn't appear to use encrpyted data
• ERROR - Something else went wrong 🤷

(unencrypted-workflow-types) brendan@Brendans-MacBook-Pro unencrypted-workflow-types % ./run.sh 
AccountTransferWorkflow SUCCESS AES/GCM/NoPadding
HelloWorld-NoData       ERROR   missing `payloads` for af83c3f9-8229-4f00-96b0-ddcc734cad62
HelloWorld-WithData     FAILED