logo

Database

Codecov Personal Access Token

Description

The source code repository contains sensitive information: Codecov Personal Access Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches Codecov Personal Access Token patterns in source code and configuration files

Vulnerable code example

codecov_api_token: 9e4d7f21-3a68-4c15-b8a2-6d5f1c9e3b70
codecov_personal_access_token = '2f6b9d43-7e15-4a82-9c04-8b3f6d1e5a92'
curl -s https://api.codecov.io/api/v2/github/myorg/repos/ -H "Authorization: bearer 6a3f8d21-9c47-4e15-b802-3f7d5a9e1c46"