logo

Database

Endor Labs Api Key

Description

The source code repository contains sensitive information: Endor Labs API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Endor Labs API Key patterns in source code and configuration files

Vulnerable code example

ENDOR_API_CREDENTIALS_KEY=endr+D6WzNtXJle7Qph4D
ENDOR_API_CREDENTIALS_SECRET=endr+5Y47PP6ANlUj41IJ
$env:ENDOR_API_CREDENTIALS_SECRET = "endr+LNhsH8HZnPiCATX0"
      ENDOR_API_CREDENTIALS_SECRET: endr+yyyFjmCXPO37VRtf
{"key": "endr+Z6kbPbEHOkuBsXxR", "secret": "endr+Urb1Io9Pv5Hcd1kA"}
endorctl scan --namespace=acme --api-key endr+DLqGZMmyAn4tvhJK --api-secret endr+qOC0PzNmGwnPZkAQ
          api_secret: 'endr+JgjtOOrNvgOLtjCO'
client = EndorClient(api_key="endr+KETWfXXEIrj3dmGs", api_secret="endr+ajFCdA9URMftBqJB")...