Skip to content

Conversation

@nnayar-r2c
Copy link
Contributor

No description provided.

@semgrep-app
Copy link

semgrep-app bot commented May 21, 2023

Semgrep found 12 java-jwt-hardcoded-secret findings:

  • vuln-main-4.java: L46
  • vuln-21.java: L46
  • vuln-main.java: L15
  • vuln-main-3.java: L15
  • vuln-main-7.java: L46
  • vuln-main-2.java: L15

A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).

Ignore this finding from java-jwt-hardcoded-secret.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant