Security Test: High number of secrets¶

Scanner(s) Support¶

Description¶

Default Severity: high

When secrets management is not properly implemented, sensitive credentials like API keys, tokens, and passwords can leak to the public. It may lead to data breaches, unauthorized access, financial loss and even legal penalties.

Configuration¶

Identifier: information_disclosure/high_number_of_secrets

Examples¶

All configuration available:

checks:
  information_disclosure/high_number_of_secrets:
    skip: false # default

Compliance and Standards¶