logo

Database

Sourcegraph Access Token

Description

The source code repository contains sensitive information: Sourcegraph Access Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Sourcegraph Access Token patterns in source code and configuration files

Vulnerable code example

SRC_ACCESS_TOKEN=sgp_40a87cc78d765ca3_365225228a81dd361bd1808ec0b007c648d06ec6
export SRC_ACCESS_TOKEN="sgp_local_294747d266bd33fddc3a7f8ce893998f0ae7f073"
sourcegraph_token: sgp_f8193c19fde3ed70f688d0c280acd2d6e908ec5e
curl -H 'Authorization: token sgp_40a87cc78d765ca3_365225228a81dd361bd1808ec0b007c648d06ec6' https://sourcegraph.example.com/.api/graphql