API keys, passwords or tokens committed into the repo.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-ca+localhost-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/malevolent-certs/localregistry.key:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-ca+client-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-noca+client-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-noca+localhost-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/tokenserver-oauth/certs/auth.localregistry.key:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-noca+localregistry-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/tokenserver-oauth/certs/localregistry.key:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-ca+localregistry-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/tokenserver/certs/auth.localregistry.key:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/tokenserver/certs/signing.key:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/tokenserver-oauth/certs/signing.key:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/tokenserver/certs/localregistry.key:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
docs/spec/auth/token.md:237
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
docs/spec/auth/token.md:247
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
docs/spec/auth/jwt.md:275
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
docs/spec/auth/jwt.md:286
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious jwt Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
docs/spec/auth/jwt.md:295
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/malevolent-certs/localregistry.key:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-ca+client-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-ca+localhost-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-ca+localregistry-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-noca+client-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-noca+localregistry-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
contrib/docker-integration/nginx/ssl/registry-noca+localhost-key.pem:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.