Skip to content

secret - #23

Open
cybertec-ogtay wants to merge 1 commit into
mainfrom
cybertec-ogtay-patch-15
Open

cybertec-ogtay wants to merge 1 commit into
mainfrom
cybertec-ogtay-patch-15

Conversation

@cybertec-ogtay

Copy link
Copy Markdown
Contributor

No description provided.

@github-actions

Copy link
Copy Markdown

🛡️ CRA Security & CVSS Gate Report

Highest detected CVSS Score: 7.5 / 10.0 (Blocking threshold: 8.0)

File:Line Rule CWE CVSS Score CVSS Vector / Source Gate Status
app3.py:6 generic-api-key CWE-798 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 🟡 INFO (< 8.0)
app3.py:4 python.requests.security.disabled-cert-validation.disabled-cert-validation CWE-295 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 🟡 INFO (< 8.0)
app3.py:5 generic.secrets.security.detected-aws-access-key-id-value.detected-aws-access-key-id-value CWE-798 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 🟡 INFO (< 8.0)
app3.py:6 generic.secrets.security.detected-aws-secret-access-key.detected-aws-secret-access-key CWE-798 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 🟡 INFO (< 8.0)

Comment thread app3.py
import requests

def fetch(url):
return requests.get(url, verify=False)
Comment thread app3.py

def fetch(url):
return requests.get(url, verify=False)
AWS_ACCESS_KEY_ID = "AKIABAQ5S0BRJ3KGRY5C"
Comment thread app3.py
def fetch(url):
return requests.get(url, verify=False)
AWS_ACCESS_KEY_ID = "AKIABAQ5S0BRJ3KGRY5C"
AWS_SECRET_ACCESS_KEY = "L9h8PJuqXqr8hAoC7OGgLf4IReGEbvrrZIIXbxND"
Comment thread app3.py
def fetch(url):
return requests.get(url, verify=False)
AWS_ACCESS_KEY_ID = "AKIABAQ5S0BRJ3KGRY5C"
AWS_SECRET_ACCESS_KEY = "L9h8PJuqXqr8hAoC7OGgLf4IReGEbvrrZIIXbxND"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants