Sensitive Data: Exposed JSON Configuration Files¶

Identifier: config_json_exposure_fuzz

Scanner(s) Support¶

Description¶

Detects exposed JSON configuration files containing sensitive information including API keys, access tokens, AWS credentials, database configurations, base URLs, file paths, and application settings. These files often contain production configurations and credentials that should not be publicly accessible.

Configuration¶

Example¶

Example configuration:

---
security_tests:
  config_json_exposure_fuzz:
    assets_allowed:
    - REST
    - GRAPHQL
    - WEBAPP
    skip: false

Reference¶

assets_allowed¶

Type : List[AssetType]*

List of assets that this check will cover.

skip¶

Type : boolean

Skip the test if true.