apache / apache/tooling-trusted-releases
Use a prefix for all secret tokens, and inform selected third party scanners
Open
critical
gh-helper
permissions
security
- Dominant language
- Python
- Stars
- 28
- Forks
- 27
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 12
Description
The ATR issues secret tokens such as PATs. These should use a standard prefix, and we should report this prefix to selected scanners such as GitHub, to help prevent them from being accidentally recorded in logs etc.
Contributor guide
Assessment
This issue has not been assessed yet.