Test
Orca Security (EU) / Orca Security - Secrets
failed
Sep 23, 2024 in 9s
Orca Security Scan Summary
| Status | Check | Issues by priority | |
|---|---|---|---|
 Failed |
Secrets |  1  1  0  1 |
View in Orca |
🔑 The following Secrets have been detected in your pull request across all commits
| NAME | FILE | LINE NUM | COMMIT | ||
|---|---|---|---|---|---|
|
AWS Secret Access Key Validity Status: VALID |
pages/index.js | 45 | ef9f939 | View in code |
|
AWS IAM - Access Key ID | pages/index.js | 44 | ef9f939 | View in code |
|
JWT Token Validity Status: EXPIRED |
pages/index.js | 43 | 6fb8799 | View in code |
Annotations
Check failure on line 45 in pages/index.js
orca-security-eu / Orca Security - Secrets
[HIGH] AWS Secret Access Key
Details:
Paired with the AWS Access Key ID, this secret key provides access to AWS
services. If revealed, it could lead to unauthorized control over AWS resources,
data breaches, and financial harm.
IMPORTANT:
We have detected that the secret is still valid. Immediate attention is required.
Recommendation:
Take immediate action to mitigate the risk of the identified hard-coded secret by
locating where it is used, revoking it, and ensuring it is updated across all
dependent systems.
Loading