logo

Database

Coveralls Personal Api Token

Description

The source code repository contains sensitive information: Coveralls Personal API Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches Coveralls Personal API Token patterns in source code and configuration files

Vulnerable code example

curl https://coveralls.io/api/repos -H "Authorization: token qW8eR3tY6uI9oP2aS5dF7gH0jK1lZ4x"
https://coveralls.io/api/repos?access_token=aZ3mK9pQxV7bN2cL5fJ8hG4wR6tY1uE0
curl -X POST https://coveralls.io/api/repos/github/octocat/coverage_service?access_token=mN4bV7cX1zL8kJ5hG2fD9sA6qW3eR0tY
coveralls_personal_api_token: aZ3mK9pQxV7bN2cL5fJ8hG4wR6tY1uE0
COVERALLS_PERSONAL_TOKEN=qW8eR3tY6uI9oP2aS5dF7gH0jK1lZ4xC9
coveralls-personal-token: mN4bV7cX1zL8kJ5hG2fD9sA6qW3eR0tY8