Security Test: Appspec Exposure¶

Description¶

Default Severity: info

This vulnerability happens when critical configuration files become publicly accessible. Essentially, sensitive information like deployment settings and secrets can accidentally be exposed if these YAML files aren’t properly restricted. Developers might leave these files in public directories or forget to limit access, which gives attackers a straightforward way to find and misuse important details about the deployment process. The risk is significant since it can lead to unauthorized access, misconfigurations, and a deeper compromise of the system if other components rely on the exposed data.

Configuration¶

Identifier: information_disclosure/appspec_exposure

Examples¶

All configuration available:

checks:
  information_disclosure/appspec_exposure:
    skip: false # default

Compliance and Standards¶