logo

Database

Coveralls Repo Token

Description

The source code repository contains sensitive information: Coveralls Repo Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches Coveralls Repo Token patterns in source code and configuration files

Vulnerable code example

COVERALLS_REPO_TOKEN=aB3fK9mQ2xZ7pL5nR8vT1cH4wD6yG0sJ3
coveralls_repo_token: qW8eR3tY6uI9oP2aS5dF7gH0jK1lZ4xC9
COVERALLS_REPO_TOKEN = "mN4bV7cX1zL8kJ5hG2fD9sA6qW3eR0tY8"
export COVERALLS_REPO_TOKEN='pL9oK6iJ3uH8yG5tF2rD9eS6wQ3aZ0xC7'
https://coveralls.io/webhook?repo_token=hK2mN5pQ8sV1xZ4bC7fJ0dG3wR6tY9uE2&carryforward=service-a