logo

Database

Socket Api Token

Description

The source code repository contains sensitive information: Socket API Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Socket API Token patterns in source code and configuration files

Vulnerable code example

SOCKET_API_TOKEN=sktsec_IQFaMxbM0xFDTg4TgCmQy4iymfDAECaL9pgyGFeuXvht_api
curl -H 'Authorization: Bearer sktsec_Z7muP5ol3wBtNlYXfLi48fo_7gvupul9PkWcNTkIi5mN_api' https://api.socket.dev/v0/quota
token: "sktsec_-Vw-AQi1nQsnwGAmwvHwU5l286TDij0VEhMM_0nzeroI_api"
SOCKET_SECURITY_API_TOKEN=sktsec_lWivqwyPh2V9zgsabBuODmu8xcnvAx5vGw5LDsK6Erk5_agent