API keys, passwords or tokens committed into the repo.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
sa-token-doc/arch/data-structure.md:258
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
sa-token-doc/arch/data-structure.md:307
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
sa-token-doc/oauth2/oauth2-oidc.md:103
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
sa-token-doc/plugin/jwt-extend.md:134
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
sa-token-doc/fun/data-structure.md:267
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
sa-token-doc/fun/data-structure.md:316
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
sa-token-doc/plugin/jwt-extend.md:134
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
sa-token-doc/oauth2/oauth2-oidc.md:103
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-core/src/main/java/cn/dev33/satoken/stp/SaTokenInfo.java:26
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-sse/src/main/java/com/pj/test/SseController.java:16
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-sso-for-solon/sa-token-demo-sso-server-solon/src/main/resources/app.yml:37
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-sso-for-solon/sa-token-demo-sso-server-solon/src/main/resources/app.yml:49
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-sso-for-solon/sa-token-demo-sso2-client-solon/src/main/resources/app.yml:19
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-sso-for-solon/sa-token-demo-sso3-client-solon/src/main/resources/app.yml:21
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-sso/sa-token-demo-sso-server/src/main/resources/application.yml:37
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-sso/sa-token-demo-sso-server/src/main/resources/application.yml:49
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-sso/sa-token-demo-sso2-client/src/main/resources/application.yml:19
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-sso/sa-token-demo-sso3-client/src/main/resources/application.yml:21
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-demo/sa-token-demo-websocket-spring/src/main/java/com/pj/SaTokenWebSocketSpringApplication.java:24
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-doc/fun/token-info.md:11
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-doc/arch/data-structure.md:18
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-doc/arch/data-structure.md:114
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-doc/arch/data-structure.md:235
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-doc/arch/data-structure.md:236
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
sa-token-doc/arch/data-structure.md:288
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.