Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dev #59

Merged
merged 317 commits into from
Jun 17, 2024

Merge branch 'dev' of https://github.com/trydirect/stacker into dev

9ae0d76
Select commit
Loading
Failed to load commit list.
Merged

Dev #59

Merge branch 'dev' of https://github.com/trydirect/stacker into dev
9ae0d76
Select commit
Loading
Failed to load commit list.
GitGuardian / GitGuardian Security Checks failed Jun 17, 2024 in 34s

62 secrets uncovered!

62 secrets were uncovered from the scan of 250 commits in your pull request. ❌

Please have a look to GitGuardian findings and remediate in order to secure your code.

Details

🔎 Detected hardcoded secrets in your pull request

  • Pull request #59: dev 👉 main
GitGuardian id GitGuardian status Secret Commit Filename
9658888 Triggered Generic Password 6ae6a48 .env View secret
9658888 Triggered Generic Password 7d8e21c .env View secret
9658888 Triggered Generic Password 7d8e21c docker/local/configuration.yaml View secret
9658888 Triggered Generic Password 6ae6a48 docker/local/configuration.yaml View secret
9658888 Triggered Generic Password 6ae6a48 docker/dev/configuration.yaml View secret
9658888 Triggered Generic Password 7d8e21c docker/dev/configuration.yaml View secret
8750835 Triggered Generic High Entropy Secret 2cb0723 tests/custom-stack-payload-3.json View secret
8750835 Triggered Generic High Entropy Secret 2cb0723 tests/custom-stack-payload-2.json View secret
8750835 Triggered Generic High Entropy Secret 2cb0723 tests/custom-stack-payload-4.json View secret
8750835 Triggered Generic High Entropy Secret 2cb0723 tests/custom-stack-payload-6.json View secret
8750835 Triggered Generic High Entropy Secret 2cb0723 tests/custom-stack-payload-5.json View secret
8750835 Triggered Generic High Entropy Secret 2cb0723 tests/custom-stack-payload-7.json View secret
8750835 Triggered Generic High Entropy Secret 2cb0723 tests/custom-stack-payload.json View secret
8750835 Triggered Generic High Entropy Secret 32b4bb6 tests/custom-stack-payload-5.json View secret
8750835 Triggered Generic High Entropy Secret 32b4bb6 tests/custom-stack-payload-3.json View secret
8750835 Triggered Generic High Entropy Secret 32b4bb6 tests/custom-stack-payload.json View secret
8750835 Triggered Generic High Entropy Secret 32b4bb6 tests/custom-stack-payload-4.json View secret
8750835 Triggered Generic High Entropy Secret 32b4bb6 tests/custom-stack-payload-7.json View secret
8750835 Triggered Generic High Entropy Secret 32b4bb6 tests/custom-stack-payload-2.json View secret
8750835 Triggered Generic High Entropy Secret 32b4bb6 tests/custom-stack-payload-6.json View secret
8750835 Triggered Generic High Entropy Secret 60520ee tests/custom-stack-payload-3.json View secret
8750835 Triggered Generic High Entropy Secret 60520ee tests/custom-stack-payload-2.json View secret
8750835 Triggered Generic High Entropy Secret 60520ee tests/custom-stack-payload-4.json View secret
8750835 Triggered Generic High Entropy Secret 60520ee tests/custom-stack-payload.json View secret
8750835 Triggered Generic High Entropy Secret 60520ee tests/custom-stack-payload-7.json View secret
8750835 Triggered Generic High Entropy Secret 60520ee tests/custom-stack-payload-5.json View secret
8750835 Triggered Generic High Entropy Secret 60520ee tests/custom-stack-payload-6.json View secret
8786802 Triggered Generic High Entropy Secret 2cb0723 tests/custom-stack-payload-9.json View secret
8786802 Triggered Generic High Entropy Secret 32b4bb6 tests/custom-stack-payload-9.json View secret
8786802 Triggered Generic High Entropy Secret 60520ee tests/custom-stack-payload-9.json View secret
8830595 Triggered Generic High Entropy Secret 2cb0723 tests/custom-stack-payload-singleapp.json View secret
8830595 Triggered Generic High Entropy Secret 32b4bb6 tests/custom-stack-payload-singleapp.json View secret
8830595 Triggered Generic High Entropy Secret 60520ee tests/custom-stack-payload-singleapp.json View secret
9266382 Triggered Docker Credentials 69f8fe8 tests/dockerhub.rs View secret
9266382 Triggered Docker Credentials 1833e8f tests/dockerhub.rs View secret
9266382 Triggered Docker Credentials 1833e8f tests/dockerhub.rs View secret
9266383 Triggered Docker Credentials 69f8fe8 tests/dockerhub.rs View secret
9266383 Triggered Docker Credentials 69f8fe8 tests/dockerhub.rs View secret
9266383 Triggered Docker Credentials 1833e8f tests/dockerhub.rs View secret
9266383 Triggered Docker Credentials 1833e8f tests/dockerhub.rs View secret
9266383 Triggered Docker Credentials 1833e8f tests/dockerhub.rs View secret
9266383 Triggered Docker Credentials 1833e8f tests/dockerhub.rs View secret
9280040 Triggered Generic Database Assignment 2cb0723 configuration.yaml View secret
9280040 Triggered Generic Database Assignment 27b2eda configuration.yaml.orig View secret
9280040 Triggered Generic Database Assignment e00f4ed configuration.yaml.backup View secret
9280040 Triggered Generic Database Assignment 81647e7 configuration.yaml.orig View secret
9658888 Triggered Generic Password 7b72d0f docker/local/configuration.yaml View secret
9658888 Triggered Generic Password 7b72d0f .env View secret
9658888 Triggered Generic Password 7b72d0f docker/dev/configuration.yaml View secret
9658888 Triggered Generic Password 2cb0723 configuration.yaml View secret
9658888 Triggered Generic Password 81647e7 configuration.yaml.orig View secret
9658888 Triggered Generic Password 27b2eda configuration.yaml.orig View secret
9658888 Triggered Generic Password e00f4ed configuration.yaml.backup View secret
9658888 Triggered Generic Password 7dde117 .env View secret
9658888 Triggered Generic Password 7dde117 docker/dev/.env View secret
9658888 Triggered Generic Password d1f40b7 .env View secret
9658888 Triggered Generic Password 737ac4f .env View secret
9658888 Triggered Generic Password 737ac4f docker/dev/.env View secret
9658888 Triggered Generic Password 7696fe7 docker/dev/.env View secret
9658888 Triggered Generic Password 7696fe7 .env View secret
10008470 Triggered Generic High Entropy Secret d89fb33 tests/mock_data/deploy2.json View secret
10008470 Triggered Generic High Entropy Secret 0cf6105 tests/mock_data/deploy2.json View secret

🛠 Guidelines to remediate hardcoded secrets

  1. Understand the implications of revoking this secret by investigating where it is used in your code.
  2. Replace and store your secrets safely. Learn here the best practices.
  3. Revoke and rotate these secrets.
  4. If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider

🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

View more details on GitGuardian