Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity |  |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
Sensitive credentials, such as GitLab Personal Access Tokens, have been found hard-coded directly in the source code. Storing secrets this way exposes them to anyone with code access, increasing the risk of credential leaks.
Impact#
If attackers obtain these hard-coded credentials, they can gain unauthorized access to your GitLab account or repositories, potentially leading to code theft, data modification, or further compromise of your organization’s systems.