Skip to content

Conversation

@Ahim-Gillamore
Copy link
Contributor

No description provided.

nfgallimore and others added 30 commits July 31, 2024 18:01
@vercel
Copy link

vercel bot commented Sep 5, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
nufacturing-api ✅ Ready (Inspect) Visit Preview 💬 Add feedback Sep 5, 2024 10:32am

@gitguardian
Copy link

gitguardian bot commented Sep 5, 2024

⚠️ GitGuardian has uncovered 62 secrets following the scan of your pull request.

Please consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.

🔎 Detected hardcoded secrets in your pull request
GitGuardian id GitGuardian status Secret Commit Filename
13251731 Triggered MongoDB Credentials a4ee45f .env.production View secret
13251731 Triggered MongoDB Credentials ee715a8 .env.production View secret
13251731 Triggered MongoDB Credentials e0a83d7 .env.production View secret
13251731 Triggered MongoDB Credentials 1fec80f .env.production View secret
13251732 Triggered Company Email Password e0a83d7 .env.production View secret
13251732 Triggered Company Email Password 1fec80f .env.production View secret
13251732 Triggered Company Email Password a4ee45f .env.development View secret
13251732 Triggered Company Email Password ee715a8 .env.production View secret
13251732 Triggered Company Email Password c16cfdc .env.staging View secret
13251732 Triggered Company Email Password ee715a8 .env.local View secret
13251732 Triggered Company Email Password e0a83d7 .env.development View secret
13251732 Triggered Company Email Password ee715a8 .env.staging View secret
13251732 Triggered Company Email Password ee715a8 .env.development View secret
13251732 Triggered Company Email Password 1fec80f .env.staging View secret
13251732 Triggered Company Email Password 3db919a .env.local View secret
13251732 Triggered Company Email Password 1fec80f .env.local View secret
13251732 Triggered Company Email Password 3db919a .env.production View secret
13251732 Triggered Company Email Password e0a83d7 .env.staging View secret
13251732 Triggered Company Email Password c16cfdc .env.production View secret
13251732 Triggered Company Email Password a4ee45f .env.production View secret
13251732 Triggered Company Email Password 1fec80f .env.development View secret
13251732 Triggered Company Email Password 3db919a .env.development View secret
13251732 Triggered Company Email Password 3db919a .env.staging View secret
13251732 Triggered Company Email Password a4ee45f .env.local View secret
13251732 Triggered Company Email Password c16cfdc .env.development View secret
13251732 Triggered Company Email Password c16cfdc .env.local View secret
13251732 Triggered Company Email Password a4ee45f .env.staging View secret
13251733 Triggered MongoDB Credentials a4ee45f .env.development View secret
13251733 Triggered MongoDB Credentials e0a83d7 .env.development View secret
13251733 Triggered MongoDB Credentials ee715a8 .env.development View secret
13251733 Triggered MongoDB Credentials 1fec80f .env.development View secret
13251734 Triggered MongoDB Credentials e0a83d7 .env.staging View secret
13251734 Triggered MongoDB Credentials a4ee45f .env.staging View secret
13251734 Triggered MongoDB Credentials 1fec80f .env.staging View secret
13251734 Triggered MongoDB Credentials ee715a8 .env.staging View secret
13251735 Triggered Generic High Entropy Secret 1fec80f .env.local View secret
13251735 Triggered Generic High Entropy Secret 1fec80f .env.development View secret
13251735 Triggered Generic High Entropy Secret a4ee45f .env.development View secret
13251735 Triggered Generic High Entropy Secret e0a83d7 .env.staging View secret
13251735 Triggered Generic High Entropy Secret ee715a8 .env.staging View secret
13251735 Triggered Generic High Entropy Secret c16cfdc .env.development View secret
13251735 Triggered Generic High Entropy Secret e0a83d7 .env.testing View secret
13251735 Triggered Generic High Entropy Secret 3db919a .env.production View secret
13251735 Triggered Generic High Entropy Secret 1fec80f .env.testing View secret
13251735 Triggered Generic High Entropy Secret 1fec80f .env.production View secret
13251735 Triggered Generic High Entropy Secret a4ee45f .env.production View secret
13251735 Triggered Generic High Entropy Secret c16cfdc .env.staging View secret
13251735 Triggered Generic High Entropy Secret c16cfdc .env.local View secret
13251735 Triggered Generic High Entropy Secret a4ee45f .env.local View secret
13251735 Triggered Generic High Entropy Secret a4ee45f .env.staging View secret
13251735 Triggered Generic High Entropy Secret ee715a8 .env.local View secret
13251735 Triggered Generic High Entropy Secret e0a83d7 .env.development View secret
13251735 Triggered Generic High Entropy Secret ee715a8 .env.production View secret
13251735 Triggered Generic High Entropy Secret 109c506 .env.testing View secret
13251735 Triggered Generic High Entropy Secret e0a83d7 .env.production View secret
13251735 Triggered Generic High Entropy Secret 3db919a .env.local View secret
13251735 Triggered Generic High Entropy Secret 1fec80f .env.staging View secret
13251735 Triggered Generic High Entropy Secret fa1de0d .env.testing View secret
13251735 Triggered Generic High Entropy Secret 3db919a .env.staging View secret
13251735 Triggered Generic High Entropy Secret c16cfdc .env.production View secret
13251735 Triggered Generic High Entropy Secret ee715a8 .env.development View secret
13251735 Triggered Generic High Entropy Secret 3db919a .env.development View secret
🛠 Guidelines to remediate hardcoded secrets
  1. Understand the implications of revoking this secret by investigating where it is used in your code.
  2. Replace and store your secrets safely. Learn here the best practices.
  3. Revoke and rotate these secrets.
  4. If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider


🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

@Ahim-Gillamore Ahim-Gillamore merged commit f8e5680 into staging Sep 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants