Conversation
![cycode-security[bot]](https://avatars.githubusercontent.com/in/39308?s=60&v=4){kind=small}
| <% | ||
| // Hardcoded credentials - Security violation | ||
| String dbPassword = "MySecretP@ssw0rd123!"; | ||
| String apiKey = "sk-1234567890abcdefghijklmnop"; |
There was a problem hiding this comment.
❗Cycode: Secret of type: 'Generic Password' was found.
Severity: Medium
Confidence Score: 97%
SHA: b4108cde21
Description
A generic secret or password is an authentication token used to access a computer or application and is assigned to a password variable.
Cycode Remediation Guideline
❗ How to revoke
- Change the password or secret in the system or application where it is used.
- Update any services, applications, or scripts that use the old password or secret with the new one.
- Invalidate any sessions or tokens that were authenticated using the old password or secret.
Tell us how you wish to proceed using one of the following commands:
| Tag | Short Description |
|---|---|
| #cycode_secret_revoked | Applies to this secret value for all repos in your organization |
| #cycode_secret_false_positive <reason> | Applies to this secret value for all repos in your organization |
|
|
||
| <% | ||
| // Hardcoded credentials - Security violation | ||
| String dbPassword = "MySecretP@ssw0rd123!"; |
There was a problem hiding this comment.
❗Cycode: Secret of type: 'Generic Password' was found.
Severity: Medium
Confidence Score: 94%
SHA: 2c3544790f
Description
A generic secret or password is an authentication token used to access a computer or application and is assigned to a password variable.
Cycode Remediation Guideline
❗ How to revoke
- Change the password or secret in the system or application where it is used.
- Update any services, applications, or scripts that use the old password or secret with the new one.
- Invalidate any sessions or tokens that were authenticated using the old password or secret.
Tell us how you wish to proceed using one of the following commands:
| Tag | Short Description |
|---|---|
| #cycode_secret_revoked | Applies to this secret value for all repos in your organization |
| #cycode_secret_false_positive <reason> | Applies to this secret value for all repos in your organization |
1 participant
No description provided.