logo

Database

Segment Api Key

Description

The source code repository contains sensitive information: Segment API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches Segment API Key patterns in source code and configuration files

Vulnerable code example

sgp_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789AB
SEGMENT_API_KEY=sgp_0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01
Authorization: Bearer sgp_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789AB
"segmentApiKey": "sgp_0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01"
curl -H 'Authorization: Bearer sgp_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789AB' https://api.segmentapis.com/workspaces