Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity |  |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
A Travis CI access token appears to be hard-coded in the source code. Storing credentials directly in code exposes them to anyone with repository access and increases the risk of accidental leaks.
Impact#
If an attacker obtains this token, they could access your Travis CI account, modify build configurations, access sensitive environment variables, or trigger builds. This could lead to unauthorized access, data leaks, or compromise of related systems.