logo

Database

Codeclimate Api Token

Description

The source code repository contains sensitive information: CodeClimate API Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches CodeClimate API Token patterns in source code and configuration files

Vulnerable code example

CC_ACCESS_TOKEN=cT8v2Bq7Xk4Lz9Wp1Rn6Yd3Fs5Hm0Jc9
docker run -it --env CC_ACCESS_TOKEN="cT8v2Bq7Xk4Lz9Wp1Rn6Yd3Fs5Hm0Jc9" --env GITHUB_ACCESS_TOKEN="ghp_exampleexampleexample01" codeclimate/test-coverage-report owner/repo
cc_access_token: cT8v2Bq7Xk4Lz9Wp1Rn6Yd3Fs5Hm0Jc9