logo

Database

Codecov Upload Token

Description

The source code repository contains sensitive information: Codecov Upload Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches Codecov Upload Token patterns in source code and configuration files

Vulnerable code example

CODECOV_TOKEN=3f2a91c4-8b6d-4e17-9a52-c8f3d61b7e04
codecov_token: 7c4e91a2-3d68-4f15-b9a7-2e6c8d51f930
CODECOV_TOKEN = "a18f6c32-9b4e-4d71-8a05-3f7c2e9b6d14"
export CODECOV_TOKEN='5d3a8f21-6c94-4b17-a250-9e7d4f1c8b36'
codecov:
  token: "6c2f8a91-4d73-4e15-9a08-3f6c1d9e5b72"