Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity |  |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
GitHub OAuth tokens were found hard-coded in the source code. Storing sensitive credentials directly in code makes them easy to accidentally share or expose, increasing the risk of unauthorized access.
Impact#
If attackers obtain these tokens, they can access your GitHub repositories, modify code, steal intellectual property, or escalate to other systems, potentially resulting in data breaches, service disruptions, or further compromise of your organization’s assets.